Does Hush Professional scan or analyze websites linked in your reports?

No. Hush Professional does not scan, analyze, or visit any third-party websites linked in our reports.

At Hush, our "Professional" product is designed to identify and reduce digital exposure — not create new surface area or introduce risk.

That is why we deliberately do not scan or analyze third-party websites to which we may link during reporting or alerting. Here is why:

1. Respecting enterprise security architecture

We defer to our clients' internal IT and cybersecurity teams, who are responsible for managing web access, endpoint protection, and sandboxing protocols. These teams are best equipped to inspect or investigate third-party links safely within their own secure environments.

2. Avoiding accidental threat amplification

• Automatically visiting suspicious or malicious links can:

• Trigger alerts in client environments.

• Unintentionally signal interest or activity to threat actors.

• Potentially expose metadata or IP addresses.

By not scanning or interacting with links ourselves, we ensure that our product remains passive and noninvasive — focused solely on detection and actionable intelligence.

3. Staying in our lane — signal, not simulation

Our role is to identify where and how professionals are exposed online, not to emulate adversary behavior. The intelligence we provide empowers client teams to take action with full visibility and control, using their own trusted processes and tooling.

The bottom line:

Hush Professional keeps your team in control, your IT protocols intact, and your exposure minimal — while still surfacing the digital risks that matter.