Question 1

Is the Threatstealth platform free to evaluate?

Accepted Answer

Yes. Threatstealth is free to evaluate — we provision an isolated tenant on request and there is no credit card or trial expiration during the evaluation. Production tenancies (managed or self-hosted) are quoted per scope, not per seat or per event.

Question 2

Is the Stealth AI assistant free to use?

Accepted Answer

Yes. The Stealth AI assistant on this site is completely free, requires no signup, and has no usage cap for normal browsing. It runs on Threatstealth's own infrastructure and is offered as a public service to security practitioners.

Question 3

Does Stealth (the chatbot) keep or train on my conversations?

Accepted Answer

No. Stealth does not store conversation contents server-side beyond the in-flight request, and your messages are never used to train any AI model. Chat history is kept only in your browser's local storage and you can clear it at any time with the CLEAR button.

Question 4

Where is my Threatstealth tenant data stored?

Accepted Answer

Tenant data is stored in the region you choose at provisioning (US, EU, UK, India, or self-hosted on your own infrastructure). Cross-tenant queries are physically impossible — every query is scoped by tenant ID at the database layer.

Question 5

How does Threatstealth handle privacy regulations (GDPR, DPDP, CCPA, HIPAA)?

Accepted Answer

Threatstealth ships with a continuous-evidence engine for GDPR, India's DPDP Act 2023, CCPA/CPRA, HIPAA, and PIPEDA. Right-to-erasure requests are handled through the Data Deletion workflow with cryptographic proof of completion. Sub-processors are documented and DPAs are available on request.

Question 6

Does Threatstealth use customer data to train AI models?

Accepted Answer

Never. Customer telemetry, alerts, repository contents, document bodies, and chat transcripts are never used as training data for any model — Threatstealth's, ours, or any third party's. This is a contractual commitment in every customer agreement.

Question 7

How is the AI assistant kept secure against prompt-injection and abuse?

Accepted Answer

Stealth runs with hard safety rails enforced at the system-prompt and output-filter layers — it will not produce working exploit code, malware, or weaponized payloads regardless of role-play attempts or escalated instructions. Inputs are length-bounded, rate-limited, and the conversation scope is restricted to cybersecurity, privacy, and AI-security topics.

Question 8

Can I self-host Threatstealth in an air-gapped environment?

Accepted Answer

Yes. Threatstealth supports fully self-hosted deployments — including air-gapped — with the same multi-tenant RBAC, audit trail, and module set as the managed offering. STIG-aligned hardening guides and FIPS 140-3 builds are available for regulated environments.

Organization Sign In