Security Architecture Guidelines

Overview

IncogSay operates as a single Cloudflare Worker — a JavaScript isolate running at Cloudflare's global edge network. All analysis is performed in CPU memory with zero external API calls, zero database writes, and zero data persistence.

The engine runs six sequential detection phases, each contributing to a final 0–100 weighted risk score. Results are computed and returned in under 50ms globally.

Performance & Efficiency

The engine is designed for ultra-low latency edge execution:

• Sub-millisecond processing — all patterns, regex, loops, and entropy calculations are fully optimized
• Minimal footprint — executes using lightweight, memory-efficient string matching and heuristics
• Parallelized verification — live DNS queries and pattern scans are run concurrently using asynchronous execution
• Max redirect depth: 5 — prevents infinite redirect loops and nesting attacks

Zero-Trust Model

IncogSay implements a Zero-Trust privacy model:

• No data retention — URLs processed in memory, never written to storage
• No logging — request logs are not captured at the application layer
• No authentication required — the tool is anonymous by design