Authorization
Customer records are checked against workspace membership.
Security
Access is bounded. Credentials stay private.
Swiss Knife SEO separates customer workspaces, protects integration secrets, and applies network safeguards to URLs supplied for crawling and quick checks.
Customer login, saved audits, GA4, and Search Console connections are handled on swissknifeseo.ai.
✓
Workspace isolationOrganization scoped accessEncrypted tokensSecrets stay out of pagesGuarded requestsPublic destinations only
Application
Keep workspace data inside its tenant boundary
Projects, crawls, reports, integrations, and saved work are resolved through the active organization before they are displayed or changed.
Sensitive fields
OAuth and provider tokens are excluded from normal pages and administration tables.
Sessions
Secure cookies and production response headers protect authenticated browser use.
Network
Treat public URL input as untrusted
Crawl and tool requests validate destinations, reject private and reserved addresses, follow guarded redirects, and bound response handling.
SSRF protection
Connections are checked before and after resolution where supported.
Rendering controls
Browser jobs restrict unsafe capabilities and run in a contained service.
Ownership limits
Unverified customer sites receive conservative crawl limits until ownership is confirmed.
Integrations
Encrypt tokens and minimize permissions
Google and other optional connections use scoped access. Stored tokens are encrypted with a dedicated application key and can be removed by disconnecting.
Read only Google
Analytics and Search Console connections cannot edit the connected properties.
Short lived files
Private artifacts use expiring signed access rather than public object URLs.
Revocation
Customers can disconnect locally and revoke at the provider.
Continue to the working platform
Open your site evidence in Swiss Knife SEO
Use the application for accounts and reports, or visit the primary product site for the complete feature and plan overview.