💻 IT & Security

Secure incident reporting and credential collection

Collect incident reports, vulnerability disclosures, screenshots of suspicious activity, and credentials for compromised accounts through self-destructing channels.

The problem

The way most organizations handle this today is a liability.

🔐

Credentials in Slack

When an account is compromised, the new password gets shared over chat. That message is now searchable by everyone in the channel.

🚨

Incident evidence lost

Employees report security incidents by emailing screenshots. Those screenshots sit in the email system indefinitely, often unencrypted.

🔎

Vulnerability reports

External security researchers have no secure way to submit findings. They email details to a shared inbox visible to the whole team.

How it works

A single secure channel from request to destruction.

1
IT team

Generates a Secretary Link for the reporter or affected user

2
Reporter

Submits credentials, screenshots, logs, or vulnerability details

3
IT team

Views the submission, takes action, submission is destroyed

4
System

No credentials lingering in chat, email, or ticketing systems

Real-world scenarios

Concrete examples of Secretary Links in action.

Password reset handoff

IT generates temporary credentials for a locked-out executive. The credentials are submitted through a Secretary Link and destroyed after viewing.

Incident evidence

An employee notices suspicious login activity. IT sends them a link to securely submit screenshots and account details without exposing them.

Bug bounty intake

External researchers submit vulnerability details, proof-of-concept code, and screenshots through an ephemeral collection link.

Key capabilities

🔒

Server-side encryption

Every submission is encrypted with its own unique key before storage. Keys are separated from data at the infrastructure level.

📎

File attachments

Screenshots, log files, configuration dumps. Whatever the incident requires.

🔌

API for automation

Integrate with your ticketing system. Auto-generate collection links when incidents are created.

🛡

Passphrase protection

Separate the link from the passphrase across different channels for defense in depth.

Ready to secure your it & security workflow?

Get early access to Secretary Links. Opening May 1, 2026.

This is not a newsletter. See our Communication Principles and Privacy Policy.