Verify an evidence pack

Team reports from BreachHunter can be downloaded as a tamper-evident evidence pack: the findings, the evidence excerpts, the scan inputs and timestamps, sealed with a SHA-256 hash chain that links the report to the workspace's previous report, plus a BreachHunter signature.

Paste a pack below and this page recomputes every hash and checks the signature. If anyone edited a finding, a score or a timestamp after the scan ran, the pack fails here, in plain language. No account is needed and the pack is not uploaded anywhere: the check runs on what you paste.

How the seal works

1. The report contents are written in a fixed canonical form and hashed with SHA-256 (the pack's core_hash).

2. The pack hash mixes in the previous report's pack hash, so the reports form a chain: editing an old report breaks its own pack and every later link.

3. BreachHunter signs the report id and the pack hash. A pack assembled or edited by hand has no valid signature.

Verification checks all three on this page, from the pasted contents alone.