Skip to content
continuouspentest

A vendor-neutral reference on continuous penetration testing and what a subscription has to deliver before it counts.

Scope a program→
DefinitionWhy cadenceBoundariesObligationsCadence designerGuides
Home

Cookies and browser storage

Updated 26 October 2026

Cookies and embedded content

The site application does not set advertising or analytics cookies and does not embed social, video or chat widgets. Its analytics script operates without cookies. Hosting security features are separate from the application and may set their own cookies and process technical request data.

Browser storage

This site has a single fixed light appearance and no theme control, so it stores no appearance preference. Unless you use the inquiry form, the application writes nothing to local storage, session storage or IndexedDB.

If you start filling in or submit the inquiry form, Cloudflare Turnstile, which protects it from automated spam, loads in a frame from challenges.cloudflare.com and keeps one technical entry, cf.turnstile.u, in that frame’s local storage for bot detection. It stays until you clear this site’s browser data. It is strictly necessary for the security of the form you choose to use, so it does not require consent. Nothing is stored if you do not use the form; if Cloudflare asks for an additional check, it may set its own security cookies.

Cadence designer choices and form fields

Selections in the cadence designer stay in page memory only. The application does not save them to local storage, they are not analytics events, and they are not included in OffSeq referral links. Reloading the page returns the tool to its default state. Anything typed into the inquiry form is not stored in the browser either; your browser may offer to refill fields from its own autofill, which is browser behaviour rather than data sent to the site.

Page views, OffSeq link clicks and form submissions

The site sends page views, clicks on OffSeq service and contact links and successful inquiry-form submissions to our self-hosted Plausible service at in.ainalytic.net. Events contain the public page address, limited campaign parameters, the referring site’s origin when available, the event name and the site domain. Link-click events include a static destination path and a placement label; form-submission events include only the form placement. Tool answers and form fields are excluded. The application sets no analytics cookies and no persistent visitor identifier. The privacy policy explains the processing and your rights.

Measurement preferences

The site respects browser Do Not Track and Global Privacy Control signals. It also reads the optional local-storage preference plausible_ignore: when its value is true, no analytics events are sent. The application never creates this preference. If you set it yourself, it stays until you remove it or clear the site’s browser data.

Questions

For questions about browser storage or data processing, email support@offseq.com.

continuouspentest

continuouspentest.org explains continuous penetration testing in plain terms: what the label does and does not guarantee, which obligations require retesting after significant change, and how to tell a real program from a scanner subscription.

Guides

  • What continuous testing is
  • Testing vs scanning vs bounty
  • Testing after change
  • Evidence for auditors

Professional help

  • Attack surface management
  • Security testing in DevSecOps
  • Scope a program
  • Talk to OffSeq

Information

  • About
  • Privacy policy
  • Cookies

continuouspentest.org is a free educational resource maintained by the OffSeq security team.

© 2026 · Operated by SEQ SIA · Riga, Latvia