Useful measurement without collecting security secrets.

Public-site analytics

When enabled and accepted, we use Google Analytics 4 to understand aggregate page visits and navigation. We disable Google Signals and request IP anonymization. Your choice is stored in your browser and can be reset by clearing site storage.

What we do not send

We do not intentionally send MCP credentials, private scan evidence, form contents, API tokens, or enterprise dashboard data to public analytics. Enterprise and API responses use separate access controls.

Security research

Public articles use aggregate or already-published intelligence. Unpublished vulnerability details and embargoed disclosures are excluded.

Contact

Questions can be sent to security@mcpsecurity.cloud.