Whatever Happens Online,
You Won't Panic.

No — and we've built it so that we physically can't. Your passwords are locked with an encryption key that's derived from your master key, which only you know and is never sent to our servers. Even if someone broke into our database, they'd find nothing readable. Not us, not our engineers, not anyone.

Your passwords are safely stored and nothing is deleted. They simply become inaccessible until you resubscribe — at which point everything is exactly where you left it. Think of it like a storage unit: your belongings stay safe inside, you just need the key to get back in. We'll never delete your vault data just because your subscription lapsed.

We never send your actual password anywhere — not even a compressed or shortened version of it. Instead, we use a privacy technique called k-anonymity. Here's what that means in practice: your password is run through a one-way mathematical process that turns it into a completely unrecognisable string of characters. We then take only the first tiny slice of that string — about 5 characters out of 40 — and send just that to the breach database. That fragment has no resemblance to your password whatsoever; it's mathematically impossible to reverse it back to the original. The database sends back a list of possible matches, and we do the final check on our end — your password never travels anywhere in any recognisable form.

Because of how we've built the system, nobody — including us — can recover your master key. If you forget it, you can request a reset via email, which will clear your vault so you can start fresh with a new master key. It sounds harsh, but it's the trade-off for real privacy. The upside: it means your vault is completely safe even if ZeroPanic itself were ever compromised.

That said, we've made it easy to protect yourself from ever losing your passwords permanently. You can export and back up your passwords any time you're logged in — so if you forget your master key, your backup is there waiting for when you remember it. We'll also remind you to back up periodically, so it never catches you off guard.

Nothing. Every single operation — encrypting, decrypting, generating keys, verifying messages — happens entirely inside your browser. You can check this yourself by opening your browser's network tab while using it. You won't see a single outbound request for your data. You can even use it offline once the page has loaded.

Absolutely. ZeroPanic was designed so that your mum could use the password vault without reading a manual, while a security engineer could use the AI assistant to review firewall logs and run threat analysis. You don't need to know what encryption algorithms are — you just need to know your passwords are safe.

A lot. For everyday users: "Is this email a phishing attempt?", "What's a strong password?", "How do I know if my phone is hacked?". For professionals: upload server logs for threat analysis, review code for security vulnerabilities, investigate indicators of compromise, or run multi-step security assessments. It meets you where you are.

Yes, any time. Cancel from your Billing page and you keep full Pro access until the end of your current billing period — no immediate cutoff, no awkward cancellation flows, no questions asked. And when you're ready to come back, everything is where you left it.

Within the same day. Our monitoring runs daily checks and sends you an email immediately when a match is found — telling you which account is affected so you can change that password right away. We'll also send a monthly summary so you have a clear picture of your overall exposure over time.

The Free tier gives you genuine, unlimited access to the AI Assistant (10 credits/month) and the full encryption tool — no payment details needed. It's not a locked demo; it's the real thing. When you're ready for the password vault and unlimited AI, upgrading to Pro takes about 30 seconds.

The Pentest Agent is an AI that actively scans and assesses targets you authorise — running real tools like port scanners, directory enumerators, and CVE lookups autonomously, then writing you a security report. In Human-in-the-Loop mode, it explains every action before running it, so you can follow along and learn as it goes even if you're not deeply technical. In Full Auto mode, it runs from start to finish on its own. Either way, you need to own or have permission to test whatever you point it at.

Only on systems you own or have been explicitly authorised to test. The agent requires you to confirm this before every session. Scanning systems without permission is illegal in most jurisdictions — the confirmation step is not a formality, it's your attestation of authorisation. ZeroPanic enforces scope technically, but legal responsibility is yours.

No. Agent sessions are ephemeral by design — scan results, tool outputs, and your final report exist only for the duration of your active session. Once you close the session, everything is gone from our servers permanently. Download your report before closing. We built it this way intentionally because security scan data is sensitive and should never sit on a third-party server longer than necessary.

Reasoning Mode tells the AI to think through the problem step-by-step before responding — rather than jumping straight to an answer. It's slower, but produces noticeably more thorough analysis for complex questions. Great for vulnerability reviews, incident response planning, or any situation where you want careful, methodical thinking over a quick answer. Toggle it on from the top-right of any chat.

Web Search Mode connects the AI to live internet search before it responds — so it can find information published after its training data ends. Particularly useful for recent CVEs, newly disclosed vulnerabilities, current threat intelligence, or checking whether a specific software version has known exploits. Toggle it on from the top-right of any chat, or combine it with Reasoning Mode for the most thorough up-to-date analysis.

Built-in managers like Apple Keychain or Samsung Pass are tied to your device and ecosystem. If you switch phones, get locked out of your account, or need to access a password from a different device, you're often stuck. ZeroPanic's vault is web-based — it goes wherever you have a browser. Log in from your phone, your laptop, an iPad and your credentials are right there. It also works across platforms, so it doesn't matter whether you're on iOS, Android, Windows, or Mac. Your passwords aren't trapped on any one device.