Engine Settings

Engine Configuration & Policies

Active security thresholds, SSRF isolation rules, and cryptographic key parameters

Verification Engine Thresholds

Deterministic 0–100 risk scoring boundaries

ENFORCED

Score 0 – 29VALID

Standard URLs, verified domain reputation, or validly signed HMAC session tokens.

Score 30 – 69SUSPICIOUS

Raw IP addresses, non-standard URL schemes, credential fields in authority, or token warnings.

Score 70 – 100INVALID

Hard-fail violations: Replay attack detected, cryptographic forgery, or known phishing domain.

Zero-Trust Isolation Architecture

Offline SSRF MitigationSafeScan completely avoids outbound HTTP calls from the verification server during analysis. Target hosts are parsed purely via RFC-compliant syntax engines and checked against offline reputation sets.

ZERO-OUTBOUND

Cryptographic Anti-Replay MechanismAttendance and session QR tokens are verified and redeemed using atomic database transactions. Once a token is marked as REDEEMED, concurrent or subsequent scan requests are locked and rejected.

ATOMIC-LOCK

Target Masking & Data MinimizationDestination URLs are masked before being written to audit logs to protect user privacy and avoid storing sensitive query parameter tokens in telemetry tables. Raw camera streams never leave the client device.

MASKED-AUDIT

Integrated API Contracts

Base: https://scan.alcanest.com

POST/api/v1/verify

JSON payload evaluation

POST/api/v1/verify/image

Multipart image file QR decoding

GET/api/v1/contexts

Session contexts collection

GET/api/v1/dashboard/stats

Operations security metrics