Security

Last reviewed: 6 October 2026. This page covers ascendryx.net and explains how to report a security problem in any Ascendryx product. LoanKit, UniVera, ScenDrive and the Growth Engine each run separately and will have their own security pages.

1. This website

• Encrypted connections. ascendryx.net is served only over HTTPS. Plain HTTP requests are redirected, the older TLS 1.0 and 1.1 versions are refused, and browsers are instructed to use HTTPS for a year (HSTS).
• Hardened browser settings. The site sends a content security policy, cannot be embedded inside another site, and switches off access to location, camera and microphone.
• No accounts and no stored customer records. This is an information site. The only personal information it handles is what you type into the contact form, which is emailed to our team.
• Hosting. The site is static and is served from Cloudflare's network.

2. What we do not claim

We would rather say this plainly than leave it to be assumed. Ascendryx does not currently hold a security certification such as ISO 27001 or SOC 2, and our products have not yet been through an independent penetration test. When that changes, this page will say so.

3. Reporting a security problem

If you believe you have found a security problem in this website or in any Ascendryx product, email [email protected]. It helps if you include:

• Which product, and which page or feature
• What you did and what happened
• Anything that helps us reproduce it

We aim to reply within 3 business days. We welcome reports made in good faith, and ask that you:

• Give us reasonable time to fix the problem before sharing it publicly
• Do not access, change or delete other people's data
• Do not run tests that disrupt the service for others

A machine-readable version of these contact details is published at /.well-known/security.txt.

4. Privacy

How we collect and use personal information on this website is described in our Privacy Policy.