Something looks wrong, a check is unclear, or you cannot get into your workspace? Tell us where you got stuck. Suhail is built and supported by the Dataloup studio.
Talk to us.
Put Suhail in the subject. If your email app does not open, copy the address into your usual inbox.
Private-pilot support is by email. We do not currently offer a guaranteed response time or round-the-clock incident response.
What to include
- The email you use for Suhail and your workspace name.
- The page address, the approximate time and your time zone.
- What you expected, what happened and any visible error code.
- Your device and browser. A cropped screenshot is useful if it shows the problem.
Please remove passwords, one-time codes, recovery links, API tokens, private source code and customer information from screenshots or attachments. We will ask for specific diagnostics if they are needed.
Sign-in and your workspace
Where should I sign in?
Use the sign-in link provided with your pilot invitation. If your access is linked to a Dataloup account, open Suhail from that account’s product card. The account page handles shared access and billing; Suhail holds your security workspace.
Test and production workspaces are separate. A test link can open a test workspace successfully without showing your existing production apps. If you land in the wrong workspace, send us its name and the page address. Do not create a replacement workspace to recover the original one.
Why am I seeing a passkey QR code?
A QR prompt can offer a passkey stored on another device. It does not, by itself, mean your saved passkey has been lost. Check the other sign-in options and select the password manager or device where you saved it.
A passkey belongs to a particular sign-in service. A Suhail-native passkey and a shared Dataloup-account passkey may use different websites; a test passkey is not automatically a production passkey. Check the website on the saved credential against the route you are using. If needed, use another sign-in method offered on that page. Do not delete a working passkey just to dismiss the QR prompt.
Apple explains signing in with a passkey on a Mac, including using a nearby device. If you are still stuck, tell us the sign-in website and your browser; never send the passkey, a QR screenshot or a sign-in code.
My email code or invitation has not arrived
Check the address you entered and your junk folder. Use the most recent message and the same sign-in route where you requested it. If it remains unavailable, contact support with the time of the request. A support request does not require you to send us the code.
Checks and coverage
What does “uncovered” or “incomplete” mean?
Suhail has not established a result for that part of your product. It may be outside the supported scope, beyond a check limit, waiting on access or affected by an error. Read the recorded reason and source revision. An empty findings list is not proof that an app is secure.
The private pilot covers selected repository, dependency, configuration and secret checks, plus selected connected-service metadata and explicitly supported behaviour checks. It is not a full assessment of every iOS app, Cloudflare setting or customer workflow. See current pilot coverage.
I fixed something. Why is it still showing?
Check whether the latest completed check inspected the commit containing your change. A queued or failed run has not verified the fix. Run the supported check again when access and allowance are available, then compare the evidence. Dismissing a finding records a decision; it does not prove that the underlying issue is fixed.
A repository or Cloudflare connection stopped working
Check that the selected repository or resource still exists and that the installation or token still has its required access. Use Suhail’s connection controls to reconnect if needed. Do not paste tokens into an email or grant wider permissions just to silence an error. Send us the resource type and visible error if the connection still fails.
Plans, bundles and usage
Public checkout is currently disabled. The plan previews show the current entry offer; larger Suhail tiers and portfolio bundles are still being finalised. An enquiry does not start a subscription.
A product can have multiple components, but it must fit the agreed repository allowance. The entry NosyPup + Suhail bundle is for one matching app in both products, with each product’s own permissions and allowances. It does not automatically cover a whole portfolio.
Repository scans, supported behaviour checks and extended reviews share the run allowance. Linux scanner time is a separate allowance. Look at Product & usage for the current period and recorded state. If the allowance says “unavailable” or “unverified”, that is not a confirmed zero balance: contact us with the visible message. Do not purchase again to resolve it.
The planned paid terms allow cancellation of renewal, with access through the paid period and no automatic overage charges. Your confirmed subscription terms will govern when paid billing opens. Deleting information and cancelling renewal are separate requests.
Your information
Read the Suhail privacy policy for connected services, stored evidence and retention. For access, correction, export or deletion, email [email protected] with the workspace and scope. We may need to verify your authority over shared records. Disconnecting an integration does not remove earlier findings.
Report a security issue
Email [email protected] with Suhail security report in the subject. Start with the affected page or feature, a short description, the time and a safe outline of how to reproduce it. Ask for a suitable way to share sensitive evidence before sending it.
If a credential is exposed, revoke or rotate it with its provider promptly. Avoid posting exploit details or another customer’s information publicly, and do not continue testing against accounts or systems you are not authorised to access. Suhail pilot support is not an emergency incident-response service.