Last updated: 24 June 2026. This policy is a working draft prepared for internal and legal review prior to publication.
Attack Insights (“Attack Insights”, “we”, “us”, or “our”) is committed to protecting the privacy of visitors to our website and customers of our Attack Surface Management (ASM) platform. This Privacy Policy explains what personal information we collect, how we use and protect it, and the rights you have over it.
1. Who we are
Attack Insights provides continuous external Attack Surface Management, threat intelligence, and related cybersecurity services. For the purposes of applicable data protection law, Attack Insights Software Pty Ltd (ABN 24 692 309 336) is the data controller of the personal information described in this policy. Our website is https://attackinsights.ai. Contact details are in section 13.
2. Scope
This policy applies to personal information we process through our website, marketing activities, sales enquiries, free security scan tool, and the Attack Insights platform. It does not apply to third-party websites we link to, which have their own privacy policies.
3. Information we collect
Information you provide to us: your name, business email address, phone number, company, job title, and the content of any message when you request a demo, submit a contact or partner form, apply for a role, subscribe to updates, or run a security scan.
Information we collect automatically: IP address, device and browser type, referring URLs, pages viewed, and similar usage data collected through cookies and analytics technologies (see section 6).
Information from the security scan tool: when you request a scan of a domain, we process the domain name you submit and publicly observable information about that domain in order to generate results.
Information from third parties: we may receive business contact data from analytics, advertising, and lead-generation providers, and from publicly available sources.
4. How we use your information
We use personal information to: respond to enquiries and provide requested demos or scans; deliver, secure, and improve our platform and services; send service and (where permitted) marketing communications; carry out recruitment; comply with legal obligations; and protect our rights and the security of our systems and clients.
5. Legal bases for processing (EEA/UK)
Where the EU or UK GDPR applies, we rely on: your consent (e.g. marketing, non-essential cookies); performance of a contract; our legitimate interests in operating and growing our business and securing our services; and compliance with legal obligations. You may withdraw consent at any time.
6. Cookies and analytics
We use essential cookies to operate the site and, with your consent, analytics and marketing cookies to understand usage and measure campaigns. You can manage your preferences through our cookie banner and your browser settings. A detailed cookie list will be maintained alongside this policy.
7. How we share your information
We do not sell your personal information. We share it with trusted service providers (sub-processors) who act on our behalf, such as hosting, email delivery, CRM, and analytics providers, under appropriate contractual safeguards. We may also disclose information where required by law or to protect our legal rights. A current list of sub-processors is available on request.
8. International transfers and data residency
Attack Insights operates from Australia and may process information in Australia and other countries where we or our sub-processors operate. Where personal information is transferred internationally, we use appropriate safeguards such as standard contractual clauses. Enterprise customers with specific data-residency requirements should contact us to discuss available options.
9. Data retention
We retain personal information only as long as necessary for the purposes set out in this policy, to comply with legal, accounting, or reporting obligations, and to resolve disputes. Retention periods vary by data type and context.
10. Security
We maintain an information security program aligned with ISO/IEC 27001 and apply technical and organisational measures appropriate to the risk, including access controls, encryption in transit, monitoring, and staff training. No method of transmission or storage is completely secure, but we work continuously to protect your information.
11. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to our processing of your personal information, to data portability, and to withdraw consent. Australian residents have rights under the Australian Privacy Principles (APPs), and residents of the EEA/UK have rights under the GDPR. To exercise any right, contact us using the details below. You also have the right to lodge a complaint with a supervisory authority, including the Office of the Australian Information Commissioner (OAIC).
12. Children
Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children.
13. Contact us
If you have questions about this policy or how we handle your information, contact us at privacy@attackinsights.ai or via our contact page. Attack Insights Software Pty Ltd (ABN 24 692 309 336), [registered office address]
14. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the “last updated” date above.