Security
Safe by default, not by configuration
Customer conversations are some of the most sensitive data a business has. Scriwo is built so the safe choice is the default one.
Access
- Owner, admin and staff roles, enforced on the server
- Staff see their own number's chats plus chats assigned to them
- Per-company limits on linked numbers
- Suspend a company or person instantly; live connections drop at once
Accounts
- Passwords are never emailed; people choose them from single-use links that expire
- Short-lived access tokens kept in memory; refresh cookies are HttpOnly
- Sign-in attempts are rate limited
Integrations
- Scoped API keys you can revoke one by one
- Signed webhooks so your server can verify every call
- Only owners and admins can create keys and webhooks
Numbers
- Removing a number unlinks it from the phone and deletes its saved login
- Leftover browser processes are cleaned up automatically
- An alert when a linked phone goes offline
Reliability
- 25 backend test suites and 61 frontend tests run on every change
- Deploys check health and roll back on their own
- The database is backed up before any change
- Every important action is written to an audit log
Scriwo connects to WhatsApp as a linked device, the same way WhatsApp Web does. It is independent and not affiliated with WhatsApp or Meta.
Have a security questionnaire?
Send it through the contact form and we will answer it properly.