Reference
Security and data handling
Protect credentials and evidence throughout authorised testing.
Reviewed
Credentials
Use dedicated identities with narrow permissions. Keep passwords, tokens and keys out of prompts, screenshots and public reports.
Follow the incident process for exposed credentials: revoke or rotate as appropriate. Removing an artefact does not invalidate a copied secret.
Evidence access
Artefacts may contain service names, request data and sensitive system details. Restrict access and redact before export.
Request the applicable agreement and deployment details for retention, residency or contractual needs. This guide does not promise a universal retention period or hosting location.
Responsible disclosure
Use the public security and support pages for current guidance. Provide affected components and redacted evidence, not working credentials.
Stop when scope or impact becomes unclear and notify the agreed owner. Distinguish suspicion from a demonstrated finding.
Continue reading
Need help with availability or an assessment? Contact Pentriarch support.