Privacy Policy

Last updated: January 2026

Introduction

XSOAR DEV provides free, client-side developer tools for security professionals. We are committed to protecting your privacy and being transparent about our practices.

The Short Version

All our tools run entirely in your browser. Your data never leaves your machine. We don't collect, store, or transmit any data you enter into our tools.

Data Processing

100% Client-Side

All data processing happens locally in your web browser using JavaScript. This means:

  • Your JSON, YAML, regex patterns, and other inputs are never sent to any server
  • IOCs, hashes, passwords, and sensitive data remain on your device
  • You can use our tools offline (once loaded) or in air-gapped environments
  • There is no database storing your tool inputs or outputs

Analytics

We use analytics services to understand how our site performs and which tools are most useful. These services collect:

  • Page views and performance metrics
  • Which tools are most popular
  • How users interact with tool features (e.g., encode vs decode)
  • Error patterns to improve reliability
  • General geographic region (country level)
  • Device type and browser information

What We Do NOT Track:

  • The actual content you enter into tools (JSON, IOCs, passwords, etc.)
  • Personal identifying information
  • IP addresses (anonymized)

All analytics are anonymized and aggregated. They help us improve the tools without compromising your privacy.

Cookies & Local Storage

We use minimal cookies and local storage:

  • Essential cookies for site functionality
  • Local storage may be used to remember your tool preferences (like dark mode)
  • No tracking cookies or advertising cookies

Third-Party Services

We use third-party services for:

  • Website hosting and content delivery
  • Analytics and performance monitoring
  • Web fonts

These services have their own privacy policies. No tool data is shared with any third party.

Security

We take security seriously:

  • All connections use HTTPS encryption
  • No user accounts or passwords to compromise
  • No backend database that could be breached
  • Open architecture means you can verify our claims

Disclaimer

XSOAR DEV stands for eXtensible Security Operations & Automation Resources. We are an independent project providing free developer tools for the security community.

We are not affiliated with Palo Alto Networks or their XSOAR product. Any similarity in naming is coincidental.

Contact

Questions about this privacy policy? Contact us at:

Email: [email protected]

Website: xsoar.dev

Changes to This Policy

We may update this Privacy Policy occasionally. Changes will be posted on this page with an updated date.