Security
A link platform is only as good as its worst redirect. Ours are built to fail closed — when in doubt, we show a safety page, never a risky destination.
Fail-closed redirects
Pending, errored, or first-scan-before-verdict requests show an interstitial instead of the destination. Safety is the default, not the exception.
No open redirects
Destinations are stored server-side and mapped by slug. We allow only http/https and block javascript: and data: schemes.
Reputation scanning
Every destination is scanned at creation and on every edit against phishing and malware lists (Google Web Risk, URLhaus, PhishTank), with homograph/punycode detection.
Atomic edits
Editing a destination re-scans it and atomically swaps the cached verdict and target — there is no window that serves a stale or malicious link.
Upload safety
Logo uploads are validated by magic bytes, size-capped, and stored outside the web root. In the MVP we accept raster logos only and reject SVG.
Hardened billing
Razorpay webhooks are verified by HMAC-SHA256 over the raw body and processed idempotently, so a replayed event can never double-charge or double-grant.
Found a vulnerability or an abusive link? Tell us and we act fast — abusive links can be disabled within minutes.