We take security seriously. Here's how we protect your account, your data, and your payments — every single day.
Every layer of our platform is built with security in mind.
All data in transit is protected using TLS/HTTPS. Sensitive data at rest is encrypted using industry-standard algorithms.
User passwords are cryptographically hashed using bcrypt. We never store passwords in plain text. Ever.
All payments are processed by Stripe, a PCI DSS Level 1 certified provider — the highest level of payment security certification.
Internal access to user data is strictly limited on a need-to-know basis and protected by multi-factor authentication.
We monitor our systems around the clock for suspicious activity, unauthorized access attempts, and potential threats.
We never share your personal information with third parties. Your data is yours — and you can request complete deletion at any time.
Security at a glance
From the moment you visit our site to the second you book a flight, your data is encrypted, your payments are secure, and your privacy is respected.
We value security researchers and believe in working together to keep the internet safe.
We won't pursue legal action against researchers who act in good faith. We credit reporters (if desired) when vulnerabilities are resolved.
Don't access other users' data. Don't disrupt services. Don't publicly disclose before we've had time to fix it. Only test against your own accounts.
Received a suspicious email impersonating Laravel? Forward it to [email protected] with the original message and any relevant context.
Security: [email protected]
General: [email protected]
We also publish a security.txt per RFC 9116.
While you were reading this
We're already on it. The only question is whether you'll see it in time.
Free forever. Pick your airports, set your budget, and we handle the rest.