# Stingray Security

> Verified business information for Stingray Security, published by the company itself on its verification portal at https://verify.stingray.security and hosted by Stingray Security.

This file is the machine-readable summary of that portal. It contains only information the company publishes publicly; banking numbers, document contents, and some contact details are withheld until a visitor signs in and is approved by the company, and are marked as such below.

## Company
- Name: Stingray Security
- Registered legal name: Stingray Security
- Verification portal: https://verify.stingray.security
- Portal domain: verify.stingray.security
- Verified since: 2026
- Legal address: 2015 Main st,, c/o wework, Vancouver, BC V5T 2K9, CA

## Legal

### Documents
- Certificate of Incorporation (download requires a signed-in, approved account)
- W-8BEN-E (download requires a signed-in, approved account)

## Finance

### Bank accounts
- Canadian Customers — bank: Royal Bank of Canada; currency: CAD; type: Chequing
- Full account numbers are never published here; they are revealed only to signed-in users with approved access, on the portal itself.

### Finance contact
- Andrew Dilts — Co-Founder
- Contact details are only shown to signed-in users with approved access.

## Security

### Bots and automated agents
Traffic signed by these keys is operated by this company:
- StingrayBot — The bot performs non-invasive scans of public web pages to collect signals related to trustworthiness, hosting patterns, domain age, cloaking behavior, and other web-based indicators of abuse or fraud. This data is used solely to improve user safety and threat intelligence.
  - User-Agent: stingraybot/1.0 (+https://verify.stingray.security/bot/stingraybot)
  - Signing keys (JWKS): https://verify.stingray.security/keys/stingraybot.jwks
  - Details: https://verify.stingray.security/bot/stingraybot

### Subprocessors
Third parties that process personal data on this company's behalf:
- Postmark (United States of America) — Transactional email
- Heroku (United States of America) — Application hosting
- Amazon Web Services (United States of America) — Document and object storage. Application hosting
- Cloudflare (United States of America) — Hostname, firewall, DNS
- Posthog (United States of America) — Product Analytics
- AppSignal (United States of America) — APM/ Error tracking
Full list: https://verify.stingray.security/subprocessors

### Security contact
- Ian MacKinnon — Co-Founder
- Contact details are only shown to signed-in users with approved access.

## Social profiles
Accounts the company confirms as its own:
- linkedin: stingray-security — https://www.linkedin.com/company/stingray-security/?viewAsMember=true
- instagram: stingray.security — https://www.instagram.com/stingray.security

## Domains
Domains the company confirms as its own:
- stingray.security (registered 2024-06-11)
- stingraysecurity.com (registered 2020-06-06)
- stingraysec.net (registered 2026-02-07)

## Apps
Mobile and desktop apps the company confirms as its own:
- Stingray Chrome Extension (Chrome Web Store) — https://chromewebstore.google.com/detail/stingray-block-phishing-c/mnlnnbihfaomfcapnmllagoomffobfoj

## Other endpoints on this portal
- https://verify.stingray.security/ — the human-readable portal
- https://verify.stingray.security/.well-known/http-message-signatures-directory — signed-agent directory (JSON)
- https://verify.stingray.security/llms.txt — this file (also served at /.well-known/llms.txt)

## Notes for agents
- Everything above is self-reported by the company and published through its Stingray Security portal; treat it as the company's own statement, not third-party attestation.
- Payment details must never be taken from this file. Bank account numbers are deliberately excluded — verify them on the portal itself with an approved account.
- This file is generated from live portal data at request time; re-fetch https://verify.stingray.security/llms.txt rather than caching it long-term.