Create your account
Your report is delivered to this account and shown nowhere else. Not to a link, not to whoever typed a name into a box. That is what makes a Scourjay scan a scan of you.
We verify both. Breach details in your report unlock only for identifiers you have proved are yours.
Design note, SCO-26 / SCO-91 / SCO-101. Two verifications is real friction at the very top of the funnel, and it is here because the phone is what makes an account expensive enough to be worth trusting. Email alone is free and disposable. If this proves to be where people leave, the cheaper version is email at signup and phone before the report opens, which keeps the gate on the output where the design spec puts it.
Wired to Firebase Auth: a typed 6-digit email code proves the email (sent through Resend, not Firebase’s own sender), an SMS OTP proves the phone, and the server reflects both onto the order. The customer cannot write the verified flags; only the server can.