SECURITY TEST ENVIRONMENT — FICTIONAL DATA — NOT FOR PRODUCTION USE
Satellite Child Find

Satellite Child Find Confidential — Authorized Access Only. Operational procedures, partner terms, analytical methods and system configurations may contain confidential and proprietary information. Do not copy, share or discuss outside authorized channels.

Public Exposure Review

Identify and review publicly accessible content, routes, and functions that may expose confidential operational information. Mark each item with the appropriate action.

30
Total Items
30
Pending Review
0
Resolved / Safe
7
Critical & Pending
Public PageHighPublicPending Review

Home

/

Main landing page. Reviewed for operational detail, vendor names, unverified claims.

satellite trackingAI analyticsfacial recognitionlicense platecourt-pre-authorized warrants
Public PageHighPublicPending Review

How It Works

/how-it-works

Process overview. Previously contained detailed 4-step workflow with operational specifics. Now uses safe four-stage summary.

step-by-step processsatellite imageryAI movement models30cm resolution
Public PageLowPublicPending Review

About

/about

Company overview, values, team placeholders, media kit links.

Public PageHighPublicPending Review

For Law Enforcement

/for-law-enforcement

LE partnership page. Previously contained 94% resolution claim, 2-hour deployment, CJIS compliance, 6-month free pilot.

94% case resolution2 hoursCJIS compliant6 months freefacial recognition
Public PageMediumPublicPending Review

For Partners

/for-partners

Partnership page with pilot perks and testimonials.

unverified testimonialspilot perks
Public PageHighPublicPending Review

Platform Demo

/platform-demo

Platform demo page with feature descriptions and screenshots.

live geospatial mapAI case intelligencereal-time trackingunverified testimonials
Public PageLowPublicPending Review

Contact

/contact

Contact forms — general inquiry and pilot application. Collects preliminary info only.

Public PageMediumPublicPending Review

Government Opportunities

/government-opportunities

Public opportunity listings. Verify no internal scoring logic or match reasons are exposed.

match scorescf_strategymatch_reasons
Public PageMediumPublicPending Review

Corporate Funding

/corporate-funding

Corporate funding opportunities page. Verify no internal outreach logic exposed.

Public PageHighPublicPending Review

Expert Network

/experts

Public expert directory. Verify expert identities and contact info are not exposed without consent.

expert identitiesresumescontact information
Public PageMediumPublicPending Review

Opportunity Center

/opportunities

Federal opportunities listing. Verify no internal scoring formulas exposed.

strategic_fittechnical_fitoverall_match_score
Public PageMediumPublicPending Review

State Grants

/state-grants

State grant listings. Verify no internal scoring or matching logic exposed.

Public PageLowPublicPending Review

Submit Tip

/submit-tip

Public tip submission form. Verify no operational data is returned to submitters.

Public PageHighPublicPending Review

Mission Link Viewer

/mission-link/:token

Token-based mission link access. Verify token validation and access scoping.

token accesscase data exposure
Public RouteCriticalPending Review

Capital Dashboard

/capital

Capital & Partner Network. Should be behind authentication. Verify ProtectedRoute gating.

funding targetsinvestor datacapital stack
Public RouteCriticalPending Review

Dashboard

/dashboard

Main app dashboard. Should be behind authentication.

case dataoperational data
Public RouteCriticalPending Review

Cases

/cases

Case list. Must be behind authentication and role-based access.

case informationsearch areas
Public RouteCriticalPending Review

Command Center

/command-center

Operational command center. Must be behind authentication and mission role.

operational controlslive data
Backend FunctionCriticalPending Review

syncSamOpportunities

/functions/syncSamOpportunities

SAM.gov sync function. Verify SAM_GOV_API_KEY is not exposed in client code. Verify admin-only access for manual triggers.

API keySAM_GOV_API_KEYsecret exposure
Backend FunctionHighPending Review

triageAgent

/functions/triageAgent

AI triage function. Verify AI outputs are labeled and human-reviewed. Verify no prompt templates exposed publicly.

AI promptsscoring thresholdsconfidence thresholds
Backend FunctionMediumPending Review

autoTagMedia

/functions/autoTagMedia

AI media tagging. Verify no model configurations or thresholds exposed.

AI model config
Entity QueryHighPending Review

GovernmentOpportunity

entity:GovernmentOpportunity

Contains match_score, match_reasons, scf_strategy. Verify RLS prevents public read of internal scoring fields.

match_scorescf_strategymatch_reasonsproject_match_scores
Entity QueryCriticalPending Review

Case

entity:Case

Contains case information, search areas, coordinates. Verify RLS restricts to authorized mission personnel only.

case informationsearch areascoordinatesfamily information
Entity QueryHighPending Review

Expert

entity:Expert

Contains expert identities, resumes, contact info. Verify public directory only shows approved, public fields.

resumecontact_emailclearance_level
Entity QueryCriticalPending Review

DroneTelemetry

entity:DroneTelemetry

Drone telemetry data. Must be restricted to mission operations only.

drone assignmentstelemetrycoordinates
Sitemap EntryMediumPublicPending Review

Public Sitemap

/sitemap.xml

Verify private/authenticated routes are excluded from public sitemap.

Missing NoindexHighPending Review

Authenticated Pages

/capital/*, /dashboard/*, /cases/*

Verify all authenticated pages have noindex meta tags to prevent search engine indexing.

noindexrobots meta
User RoleMediumPending Review

Admin Users

admin:users

Review all users with elevated roles (admin). Verify each admin assignment is current and necessary.

elevated rolesadmin access
Partnership ClaimHighPublicPending Review

Agency Testimonials

/for-law-enforcement, /platform-demo

Testimonials from named law enforcement personnel. Verify each testimonial is documented and approved before public display.

unverified testimonialsChief Emily NguyenDetective Maria LopezSheriff Alan Brooks
Partnership ClaimHighPublicPending Review

Pilot Program Claims

/for-law-enforcement

Claims about pilot program results (94% resolution, 6 months free). Verify or remove unverified claims.

94% case resolution6 months freeproven results

Review Guidance

  • Safe for Public Release: Content is appropriate for public viewing — outcome-focused, no operational detail.
  • Generalize Language: Content needs rewording to remove operational specifics, vendor names, or technical configurations.
  • Move to Partner Portal: Content should only be visible to authenticated, approved partners.
  • Restrict to Mission Operations: Content should only be visible to authorized mission personnel.
  • Remove from Public View: Content must be removed from public pages entirely.
  • Requires Legal or Security Review: Escalate for legal counsel or security team assessment.