Company

Security

KillerWhale handles sensitive investigative context. The platform is built so that client information, research state and proprietary technology stay separated.

Controls

How the platform is protected

Isolated commercial data

Commercial intake is stored separately from research and pipeline state, with insert-only public access and no public read path.

Server-side execution

Chain access, analysis and any Engine work execute server-side. Nothing proprietary is shipped to the browser.

Credential hygiene

KillerWhale never asks for private keys, seed phrases or exchange credentials, and cannot act on your funds.

Read-only chain access

Blockchain access is read-only. The platform observes chains; it never transacts.

Integrity halts

Integrity failures stop the pipeline and enter validation hold rather than continuing on suspect data.

Provenance retention

Verification records and manifests are retained so findings remain auditable after delivery.

Confidentiality

Client information

Intake submissions are used only to scope and deliver an engagement. Case details are not published, not resold, and not used as marketing material without written consent.

Report the discovery of a security issue in this platform through the contact page. Please include reproduction detail and do not test against production data belonging to other parties.