Every product encodes the beliefs of the people who built it. Here are ours.
Non-Custodial by Architecture
We don’t ask for your private keys because the system is designed so we never need them. All scanning uses public blockchain data. All revocations are standard ERC-20 transactions signed in your own wallet. We couldn’t access your assets if we wanted to — the capability doesn’t exist in the code. Trust should be a property of the architecture, not a line in a terms of service.
Open Source Core
The scanner that protects users is free and public. Anyone can read the code, audit the risk scoring logic, fork the project, or self-host it. We chose AGPL-3.0 specifically because it protects the community: anyone can use and modify the code, but if they run it as a competing service, they must share their modifications. The core is a public good. Premium services — monitoring, team dashboards, the API — fund its development.
No Data Selling
We do not sell user data. We do not share wallet addresses with third parties for marketing. We do not track your on-chain activity beyond scans you explicitly trigger. The business model is subscriptions and API access — not data extraction. If the product is free, you are not the product. If the product is paid, you are the customer.
Free Where It Counts
The core scanner is free. Scanning your wallet, seeing your approvals, understanding your risk, revoking dangerous permissions — these are not premium features. They are baseline security that everyone deserves. Premium features are for power users and teams who need continuous monitoring, automation, compliance exports, and API access. The free tier is not a demo. It is the product.
Accuracy Over Speed
We would rather show you a correct risk score in 30 seconds than an incorrect one in 3 seconds. The risk engine checks contract verification status, known exploit databases, approval amounts, spender reputation, and behavioural anomalies. When RPC data is incomplete, we say so rather than guessing. A security tool that gives false confidence is worse than no tool at all.
Build to Last
AllowanceGuard is independently operated. We do not have investors demanding growth-at-all-costs. We do not have a token that needs price support. We have a product, customers, and an open-source community. The company is structured to be sustainable, not to exit. If we disappeared tomorrow, the code would still be available for anyone to run. That’s the point.