Security
A cleaner has powerful access to your files. We treat that as a responsibility.
Signed installers
Windows installers are code-signed, and every release publishes SHA-256 checksums.
Signed rule packs
Rule packs are signed with Ed25519. Apps refuse packs whose signature or version they can’t verify.
Verified updates
Update metadata and downloads are verified before anything is installed.
Least privilege
Administrator rights are requested only when a task needs them. No UAC bypass, no disabling of security tools.
Hardened website
Strict Content Security Policy, HSTS and no third-party scripts by default.
Report a vulnerability
Please email security@safecleanup.app with details and steps to reproduce. We acknowledge reports within 3 business days and credit researchers who want it. See our security.txt for details.