Skip to content

Security and compliance for a network built on consent.

Every residential device opted in, we know every paying customer, and risky sites are blocked for everyone.

Start free trialSee the documents
// sourcing

Every residential IP comes from a person who opted in.

Device owners choose to share, can stop at any time, and share only their IP address and bandwidth.

  1. A person installs an appA game or utility they get free, or an app that pays for sharing, built with the Cash Raven SDK.
  2. They opt inSharing starts only after they accept a clear consent screen.
  3. They can leave any timeEvery app ships a visible opt-out.
  4. Risky targets are blockedOur block list covers every device, and unusual use triggers ID checks.
  • EWDCI certified seal
    EWDCI certifiedEthical Web Data Collection Initiative
  • GDPR compliantEU data protection
  • CCPA compliantCalifornia consumer privacy
How we keep the network cleanHow Cash Raven works
// controls

The same controls apply to every customer.

  • We know every paying customer

    Scale Residential is sold to verified businesses after a compliance review, and unusual use triggers ID checks on any account.

    KYC and compliance

  • Sensitive sites are blocked

    Banks, government, login pages and reported sites are blocked for every customer.

    Ethical usage and acquisition

  • Abuse gets action

    Every abuse report gets action within one business day. Rayobyte was the first proxy provider to publish its abuse process.

    Our abuse process

  • Security reviews

    Our sales team handles security reviews, questionnaires and vendor onboarding.

    Contact sales

  • Report a vulnerability

    Security researchers can report issues under our vulnerability disclosure policy.

    Vulnerability disclosure policy

  • Law enforcement requests

    How we handle requests from law enforcement agencies.

    Law enforcement inquiries

Protections against misuse are built into every device.

  • Dangerous ports are blocked

    No device will connect to remote shells (SSH, Telnet, RDP and VNC), Windows file sharing, databases, directory services, Android debugging or admin and debug ports.

  • Home networks are off limits

    A device never connects to its owner’s local network, its own loopback address or cloud metadata addresses.

  • The rules can only get stricter

    The block list is compiled into the software and enforced both on our relay servers and on the device. It can be tightened remotely but never loosened.

  • Every refusal is logged

    Each blocked connection is logged with its destination, and those logs feed our abuse monitoring.

  • Sanctioned territories are excluded

    The network does not accept devices in sanctioned territories.

  • Proxy traffic stays encrypted

    HTTPS and SOCKS5 traffic through our proxies passes as a raw tunnel that we never decrypt. Web Unblocker and the Scraping API work differently: they fetch the page for you, so they terminate TLS to do it.

How Cash Raven protects devices

Our own scanner checks every server four times a day.

It looks at each server we run from the outside, the way an attacker would, and sends every serious finding to our team with the fix attached.

Read the documents behind each control before you buy.

Questions about security and compliance.

Contact sales
Where do your residential IPs come from?

From people who opted in on a consent screen, in the Cash Raven app or in a partner app built with its SDK. Nothing is shared until they agree. They share only their IP address and bandwidth, never files, accounts or browsing history, inside daily and monthly data limits, and one switch stops sharing at once.

How are device owners paid?

People who run the Cash Raven app earn credits and cash them out from the app. People who share through a partner app are not paid in cash: they get the app free, or without ads.

How do you verify customers?

We know every paying customer. Scale Residential is sold to verified businesses after a compliance review, and unusual use triggers ID checks on any account.

Which sites are blocked?

Banks, government, login pages and reported sites are blocked for every customer.

How fast do you act on abuse reports?

Every abuse report gets action within one business day. We were the first proxy provider to publish our abuse process: read how it works.

Are you GDPR and CCPA compliant?

Yes. Read our Privacy Policy and our privacy notice for California residents.

Is there an uptime SLA?

Yes, a 99.9% uptime SLA. The terms are in our Service Level Agreement.

Collect more. Spend less.

The proxy and scraping network priced for the AI era.

// self-serve

Start in minutes

Every self-serve product has a free trial, and no credit card is needed.

Start free trial
// for teams

Talk to sales

Sales offers volume pricing below our published rates, custom plans and a direct line to the people who run the network.

Contact sales

AI made it possible to use far more of the web than anyone collected before. Read the full thesis