Pathix is built and licensed by Pathix L.L.C., a Maryland limited liability company. The product is self-hosted, which changes the shape of most vendor questions: the software runs in your subscription, and the company behind it never holds your data.
Suspected vulnerabilities reach security@pathix.app. Reports are acknowledged within two business days and triaged within five. Critical findings ship patched releases within fifteen calendar days of validated discovery.
The full security posture, including the trust boundary and the scanner's read-only privilege footprint, is on Security.
Evaluations, pricing, and anything commercial.
Support, including customer-initiated log exports.
Vulnerability reports. See the disclosure terms below.
Privacy and data-protection questions.
The contract, in full. Version 1.1, effective 28 July 2026.
Architecture, trust boundary, and the scanner's read-only footprint.
What is collected, what never is, and why there are no sub-processors.
The Environment Report, as delivered.