01
The key is the boundary
Every lookup is authenticated, scoped to one key and bound to an IP. Anonymous calls get a 401, not a demo.
AuthIP binding
Security teams
Threat hunting, without the guesswork.
Monitor compromised credentials, breach data and threat-actor infrastructure, with automated alerts and a trail that stands up to review.
Credential exposureBreach dataStealer logsAlertsAudit
Security model
What holds the line02
Rate limits by design
Search and non-search endpoints carry separate budgets, so one noisy script cannot drain a whole tenant.
Rate limit
03
Nothing kept in the browser
Results are streamed to the caller and never persisted client-side; sessions live in httpOnly cookies.
SessionCookies
04
An audit line per lookup
Who, when, which key, which module. Failures are logged with the same detail as hits.
Audit