Questions people actually ask

The file itself never leaves. Static analysis, YARA matching and decompilation all run on hardware we own inside the EU, and we do not submit your files to any public sandbox or multi-engine scanning service. What does leave is the file's SHA-256 hash: at upload it is checked automatically against three public malware registries (CIRCL hashlookup, Team Cymru and MalwareBazaar), which learn only that someone asked about that hash. Indicator lookups you run by hand query the reputation services listed in our Privacy Policy.

We do not publish a ratio. What you get instead is a verdict, the evidence chain that produced it, and a coverage manifest saying what was parsed and what was skipped. An empty result tells you which of those it was.

Passive by default: we read public records and third-party data, and never probe a target you have not verified. Active service, version and vulnerability testing needs proof that you control the domain and your written authorisation first.

Within a deliberate limit. We report that an organisation appears on a leak site, which site, and when it was first seen. We do not retrieve or store dump contents or credential pairs.

The Analyst plans analyse files and indicators you submit. Brand Watch adds continuous monitoring of your own registered domains and brand, delivered to your systems as a feed. One is analysis you drive; the other watches your estate for you.

On servers we run in the EU. The platform is hosted in Germany, our email is on an EU data centre, and analysis of your files runs on EU hardware. Encrypted off-site backups are held in Backblaze's EU data centre in the Netherlands, and the public website is served through Cloudflare's edge. The providers we rely on are listed in our Privacy Policy.

It depends on your plan, and the number is stated in days rather than left vague. Researcher keeps results 7 days; the higher plans keep them longer, up to 90 days on Brand Watch. Personal data is not kept beyond what the service needs. A separate period applies once a subscription ends: see the cancellation answer below, and section 6.2 of the Privacy Policy.

Yes, for a small first group. The trial gives you the analyst product for 14 days: file analysis, indicator lookups, the reverse-engineering workspace and rule replay, with the Trial plan's daily allowance of ten files. Enter your email at app.radecti.com/signup, accept the terms, and set your password from the link we send; the 14 days start when you do. No card, nothing to cancel: the trial ends by itself, your scans and notes are kept for 3 more days, and if you want to continue you email support@radecti.com and we move the account to the plan you choose with everything in it. When every place is taken the sign-up page says so and offers a waitlist.

Not through an online checkout. Access to a paid plan is by request: email support@radecti.com with the plan you want and whether you are buying as an individual or a business (the contact page has pre-filled links). We reply within one working day with our terms and the information the law requires before you order, then create your account and email you a link to set your password. We are completing our business registration; we tell you in that reply exactly when and how billing starts, and nothing is charged before you have agreed to it in writing.

The consumer plans (Researcher, Analyst and Analyst Pro) carry the EU statutory right of withdrawal: 14 days from the day your order is confirmed by email, no reason needed; a plain statement to support@radecti.com is enough. When a subscription ends, by cancellation or an unpaid invoice, monitoring stops that day and we hold your data for 90 days before erasing it. You can sign in and export it throughout, and subscribing again within the 90 days restores the account. The full terms are in our Terms of Service, and section 6.2 of the Privacy Policy covers what the erasure removes and what it keeps.