SECURE BY DESIGN

Your app is the trust boundary.

Insider stores what your SDK is configured to send. Ignore paths, scrubbing, and PII controls live in your app — before a beam leaves your servers.

shield_locked

SDK-based scrubbing

Path ignore lists, scrubbing, and PII settings are configured directly in the SDK. Data is sanitized at the source—before it ever leaves your servers. You maintain absolute control over the data lifecycle.

insider.init({
    dsn: "https://@insider.com",
    scrub_fields: ["password", "token", "ssn"],
    ignore_paths: ["/health", "/metrics"]
})
encrypted

HTTPS Beams

All telemetry footprints are transmitted via encrypted HTTPS channels using project-specific credentials (DSN). We ensure zero data exposure during transit.

key_visualizer

Credential Rotation

Revoke or rotate DSN and footprint tokens instantly via the dashboard. Maintain security hygiene without redeploying code in most cases.

verified_user

Non-Raising SDK

Our SDK is architected for zero-impact on your application logic. If Insider becomes unreachable, the SDK fails silently and will not raise exceptions into your app.

filter_alt

Opt-in Scrubbing

Sensitive-key scrubbing defaults are opt-in. You choose exactly what to redact, giving you the flexibility to balance observability with compliance requirements.

Data Sovereignty & Handling

  • dns

    Multi-Tenant Isolation

    Strict data partitioning ensures that your footprints and issues are never visible or accessible to other organizations.

  • history_toggle_off

    Configurable Retention

    Telemetry data is automatically purged based on your plan's retention period (7 to 90 days), minimizing long-term data risk.

  • group_add

    Granular RBAC

    Invite members with specific roles (Owner, Admin, Member) to control who can view footprints or manage project credentials.

security

Your app is the trust boundary.

Insider does not second-guess what you send. Controls run in the SDK on your servers, then the beam goes over HTTPS with your DSN.

  • You choose what is captured — ignore paths, scrub keys, PII off by default.
  • Beams use HTTPS and a project DSN. Rotate or revoke it from the dashboard.
  • If Insider is unreachable, the SDK is designed not to raise into your app.

Ready to beam with the controls you set?

Create a project, paste your DSN, and decide in the SDK what leaves your app.