Data retention

Free scans store nothing#

If you want to keep a free scan result, redirect it when you run it:

curl https://qsa.sh | tee qsa-$(date +%F).txt

Paid scans#

Full and Deep run asynchronously, so the result has to survive between the scan finishing and you collecting it. That is a single read or a 24 hour Redis window, not a database. Deep additionally emails the report to the address you supply.

There is no scan history to browse later, because there is no account to attach it to.

Time bounding#

Every scan self terminates at a hard cap. If your connection drops, the scan is cancelled as soon as the disconnect is detected.

Contact and support data#

Support is handled through the form at qsa.sh/contact. To help with triage, an automated reputation lookup of the IP you contact from is attached to your ticket.

Next#

• Acceptable use
• Target detection and safeguards
• Back to the index