Security
Last updated · September 7, 2026
This page describes what the product actually does. It is not a certification, and it does not claim one.
Two surfaces, one boundary
| Surface | Access | What it reads |
|---|---|---|
| Public preflight and scan | none — no account, no credentials | public pages and the public WooCommerce Store API of the origin you name |
| Release Gate | bearer token, scoped, plus a verified ownership record for that store | signed aggregate evidence produced by the WordPress plugin on your own store |
The public tools cannot reach the Release Gate, and the Release Gate cannot
run against a store whose ownership has not been proved. The three
owner-authorized tools return AUTH_REQUIRED or
OWNERSHIP_REQUIRED rather than a partial answer.
What the plugin sends
Signed aggregate evidence only. It does not read or transmit customer records, orders, payments, URLs, note bodies or product content. Your WordPress keys never enter an evidence packet or a result packet.
Ownership is proved with a 15-minute signed challenge. It expires.
What the public checks will not do
- They are read-only. No tool writes to your store.
- They refuse private and link-local addresses, unsafe redirects, DNS rebinding, oversized responses and unparseable content, with a finite reason code for each.
- They return aggregate check evidence; no product text or customer data crosses the boundary.
- They are rate limited: 3 per target origin per day, 10 per calling address per day.
Settlement
Release Gate settlement is disabled. Any price shown for it is a beta price and is not available for purchase. A replayed result claim is never billable.
Reporting a vulnerability
Email hello@utilityhouse.xyz with security in
the subject.
Please include what you did, what you observed and what you expected. Please do not include working credentials, customer data, or data from a store you do not operate — a description is enough.
We do not run a paid bounty, and we do not publish a response-time commitment we have not measured. We will confirm receipt and tell you what we find.
Please do not run automated load, denial-of-service or high-volume scanning against this service. The rate limits are small on purpose.
Known limitations, stated rather than hidden
- Diagnostic accuracy against real merchant stores is unmeasured. Synthetic fixtures and a disposable canary do not establish it.
- A
BLOCKEDorUNMEASUREDresult means we could not tell — it is not a finding about your store. - We do not measure ranking or visibility inside any private agent network, and we make no claim about one.