General
Securoly is a YouTube channel security scanner. We analyse your channel's public data and account security signals to give you a security score, risk level, and plain-English action steps to protect your channel from hacks.
We use the YouTube Data API v3 to read publicly available channel information — description, videos, links, language, and metadata. For paid plans, you can connect your Google account (read-only OAuth) so we can also check 2FA status, connected apps, and session security.
We use three read-only endpoints from the YouTube Data API v3:
channels.list — Called once per scan. Fetches publicly available channel data: name, description, custom URL (@handle), subscriber count, video count, view count, country, brand account status, and kids content flag. This is the same information already visible on any public YouTube channel page.
playlistItems.list — Called once per scan. Fetches the IDs of the 15 most recent public videos from the channel's uploads playlist (50 videos on Creator Pro for the advanced threat scan). Only video IDs are retrieved in this step — no titles, descriptions, or view counts.
videos.list — Called once per scan using the IDs from the previous step, batched in a single request. Fetches each video's title, description, and publish date. We scan titles for scam/crypto keywords and descriptions for suspicious links, executable file references, and phishing patterns.
All three calls use a server-side API key and only return public data — no login is required from the channel owner. For paid plans with a connected channel, we additionally call Google's OAuth token introspection endpoint (not a YouTube API) to check which third-party apps have permission on your Google account. This always requires your explicit consent via Google's OAuth screen.
channels.list — Called once per scan. Fetches publicly available channel data: name, description, custom URL (@handle), subscriber count, video count, view count, country, brand account status, and kids content flag. This is the same information already visible on any public YouTube channel page.
playlistItems.list — Called once per scan. Fetches the IDs of the 15 most recent public videos from the channel's uploads playlist (50 videos on Creator Pro for the advanced threat scan). Only video IDs are retrieved in this step — no titles, descriptions, or view counts.
videos.list — Called once per scan using the IDs from the previous step, batched in a single request. Fetches each video's title, description, and publish date. We scan titles for scam/crypto keywords and descriptions for suspicious links, executable file references, and phishing patterns.
All three calls use a server-side API key and only return public data — no login is required from the channel owner. For paid plans with a connected channel, we additionally call Google's OAuth token introspection endpoint (not a YouTube API) to check which third-party apps have permission on your Google account. This always requires your explicit consent via Google's OAuth screen.
It's our calculated probability that your channel would be targeted by hackers based on your subscriber count, channel age, content value, and security posture. It's not a guarantee — it's a risk signal to help you prioritise what to fix first.
No. Securoly is an independent service and is not affiliated with, endorsed by, or associated with YouTube or Google. We use the YouTube Data API v3 under Google's API Terms of Service to provide our security scanning service.
Our Security Digest is a public page with aggregate, anonymised stats and patterns pulled from real scans — scam comment tactics, phishing sender patterns, and more. No individual creator or channel is ever identified in it.
Privacy & Security
Never. Our OAuth access is strictly read-only. We cannot and do not post, comment, upload, or modify anything on your channel or Google account.
Yes. We use Google OAuth with strictly read-only scopes (
youtube.readonly and userinfo.email). We never store your Google password, never request write permissions, and never post or modify anything on your account. OAuth tokens are used only during an active scan session and are discarded from memory as soon as the scan completes — they are never written to our database.
You have two easy ways to revoke access:
Option 1 — Inside Securoly: Go to your dashboard → Settings tab → Connected Account section. Click the "Revoke access →" link shown below your YouTube connection status. This takes you directly to the Google page where you can remove Securoly.
Option 2 — Via Google directly: Visit myaccount.google.com/connections, find Securoly in the list, and click Remove access.
Revoking access removes all OAuth permissions immediately. Your Securoly account and scan history are preserved — to remove those, use the Delete account option in Settings.
Option 1 — Inside Securoly: Go to your dashboard → Settings tab → Connected Account section. Click the "Revoke access →" link shown below your YouTube connection status. This takes you directly to the Google page where you can remove Securoly.
Option 2 — Via Google directly: Visit myaccount.google.com/connections, find Securoly in the list, and click Remove access.
Revoking access removes all OAuth permissions immediately. Your Securoly account and scan history are preserved — to remove those, use the Delete account option in Settings.
We store your name, email, and Google profile photo (from sign-in), your scan results and security scores, and temporarily use OAuth tokens to run checks on paid plans. Tokens are never written to the database and are discarded after each scan. We never store card numbers, CVV, or UPI details — payments are handled entirely by Razorpay. See our Privacy Policy for full details.
Yes. Go to your dashboard → Settings tab → scroll to the Danger Zone section → click "Delete my account". This permanently deletes your account, all scan history, and cancels any active subscription. Everything is wiped within 24 hours and cannot be undone.
You can also email trust@securoly.com for a manual deletion request. Note: deleting your account does not automatically revoke Google OAuth permissions — do that separately via myaccount.google.com/connections if needed.
You can also email trust@securoly.com for a manual deletion request. Note: deleting your account does not automatically revoke Google OAuth permissions — do that separately via myaccount.google.com/connections if needed.
Plans & Features
Creator (₹299/mo) gives full audits on your connected channel, a score trend dashboard, 2FA and session checks, PDF reports, and the full security toolkit (email scanner, comment scanner, incident response kit).
Creator Pro (₹499/mo) adds: full audit on any YouTube channel, a 6-hour compromise monitor with instant email alerts, weekly auto-scans every Monday with score drop notifications, and a weekly email security report.
Creator Pro (₹499/mo) adds: full audit on any YouTube channel, a 6-hour compromise monitor with instant email alerts, weekly auto-scans every Monday with score drop notifications, and a weekly email security report.
The toolkit (Creator and Creator Pro) bundles three on-demand tools alongside your regular scans, all in one tab on your dashboard:
Email Scanner — paste or upload a sponsorship/brand-deal email and we'll check it for phishing and account-hijack signs before you click anything.
Comment Scanner — scans your channel's recent comments for scam patterns and impersonator links, so you can spot and report them before your audience gets tricked.
Incident Response Kit — if your channel is ever compromised, this walks you through Google's real recovery process step by step and generates a PDF of ownership evidence to speed up the appeal.
Email Scanner — paste or upload a sponsorship/brand-deal email and we'll check it for phishing and account-hijack signs before you click anything.
Comment Scanner — scans your channel's recent comments for scam patterns and impersonator links, so you can spot and report them before your audience gets tricked.
Incident Response Kit — if your channel is ever compromised, this walks you through Google's real recovery process step by step and generates a PDF of ownership evidence to speed up the appeal.
The Starter plan gives you 5 free scans per month. You get a security score, risk level, and a summary of the top 3 findings. Full findings, detailed recommendations, and PDF reports require a paid plan.
Creator plan is designed for scanning your own connected channel with a full audit. To run a full audit on any YouTube channel (e.g. a competitor or client's channel), you need Creator Pro.
Exclusive to Creator Pro. Every 6 hours, Securoly automatically re-checks your channel for signs of compromise — sudden subscriber drops, suspicious video uploads, description changes, and more. If anything looks wrong, you get an instant email alert.
The PDF report (Creator and Creator Pro) includes your security score breakdown by category, risk level, all findings with severity ratings, prioritised recommendations, and channel metadata. It's shareable and printable — useful for agency clients or team reviews.
Billing & Subscription
Yes — as long as you stay subscribed without a gap, your rate never changes. This is our founding member pricing. Future subscribers will pay the standard price.
We accept all major credit/debit cards, UPI, net banking, and wallets via Razorpay. All transactions are processed securely by Razorpay — we never see or store your card details.
Securoly is a product of Prasomatic LLP, our registered legal entity. Payment processors like Razorpay settle and label transactions under the legal entity behind a product rather than its brand name, so your card/bank statement and billing receipts show "Prasomatic LLP" instead of "Securoly." This is standard practice — it's the same subscription, just billed under our official company name.
Yes. Cancel from your dashboard Settings tab at any time. Your plan stays active until the end of the billing period, then downgrades to the free Starter plan. No lock-in, no questions asked.
You keep access until the end of your annual period. No partial-year refunds, except in the first 7 days under our satisfaction guarantee.
Yes. If you're not satisfied within the first 7 days of a new subscription, contact us at support@securoly.com for a full refund, no questions asked. See our Refund Policy for full details.