Data transmission
Last updated: Nov 4, 2026
This page explains how Fluid Attacks decreases information leaks when it sends data to its clients.
Secure information-sharing system
Fluid Attacks uses an information-sharing system with DLP (data loss prevention) when it sends sensitive information to its clients. This includes contracts, portfolios, and other confidential documents. Also, the Fluid Attacks platform has a feature that lets clients securely upload files that can be helpful or necessary for security testing.
Onion routing
The Fluid Attacks domain supports onion routing. This makes user privacy better and gives more precise control of protection.
Reports for the requester only
A user can download technical PDF reports from the Fluid Attacks platform. The first page of each report shows the email of the user who requested it. It says that only this user has permission to read the report. Thus, Fluid Attacks can identify who requested the report. This text also discourages the distribution of the report through channels other than the Fluid Attacks platform.
Requirements
- 032. Avoid session ID leakages
- 045. Remove metadata when sharing files
- 132. Passphrases with at least 4 words
- 261. Avoid exposing sensitive information
- 300. Mask sensitive data
Other privacy measures
Project pseudonymization
Fluid Attacks assigns pseudonyms to all projects so that employees without direct access cannot identify the client behind a project in internal systems.
Unsubscribe email
Fluid Attacks lets users unsubscribe from commercial and informative emails to stop receiving messages, in compliance with the right to withdraw consent.