Security

Security is an important part of how we build and operate UtiliStudio.

Security approach

We take reasonable measures to protect the service and the information handled by it. No system is perfectly secure, and this page describes our general approach rather than making absolute guarantees.

Data protection

Many tools process information locally in the browser. Users should avoid entering passwords, private credentials, or other sensitive information into tools unless the tool specifically requires and clearly explains such use.

Browser Extension & Local Network Bridge Security

For developers testing localhost, corporate VPN, private network, or CORS-restricted APIs that do not return CORS headers or reject OPTIONS preflight requests, UtiliStudio offers an optional Manifest V3 Browser Extension (/utilistudio-extension.zip).

Origin-Locked Isolation: The extension only accepts messages from https://utilistudio.com, https://www.utilistudio.com, and local development origins (http://localhost / http://127.0.0.1). Untrusted websites cannot invoke the bridge.
Zero Cloud Relay for Private Networks: Localhost, VPN, and internal network requests are executed directly from your desktop browser and never pass through external cloud proxies.
Compact & Self-Contained Package: The extension package contains compact, dependency-free JavaScript (manifest.json, content.js, and background.js) with zero third-party libraries or external network dependencies.

Security reports

If you believe you have identified a security issue in UtiliStudio, please contact support@utilistudio.com with relevant details.

Responsible use

Please do not attempt to disrupt the service, access information that does not belong to you, or interfere with other users.