Security & Trust

Isolation. Every conversation runs in its own Docker container with a memory cap and a private workspace volume. Deleting a chat destroys both.

Authorization. DarkAI is built for testing systems you own or are contracted to test. It asks for that authorization before it starts an active test.

Data. Conversations are stored so you can come back to them. Account data stays in our own database; nothing is sold or shared.

Accounts. Login only — password hashes are scrypt, sessions are opaque tokens in an httpOnly cookie.