Safety Telemetry

By default, Safety receives non-sensitive, anonymized telemetry data when scans are performed. These data are captured solely for the purpose of delivering, maintaining and improving the Safety product.

The data captured include the following:

NameDescriptionEssential / Optional

Safety Version (safety_version)

The version of Safety that was used, e.g. v3.0.1.


Safety Source


The method by which Safety was used, e.g. via the CLI or via code.


Safety Command


Limited to the command used when running the scan (e.g. safety scan, safety check)


Safety Options


Limited to the options used and how many times each is used, e.g. -r, --output, et al.


Python Version


The version of Python installed.


OS Type


The OS type used.


OS Release


The version of the OS used.


OS Description (os_description)

Description of the OS used.


Disabling Non-Essential Telemetry Data

It is possible to disable the non-essential telemetry data by using the following option:

--disable-optional-telemetry e.g. safety scan --disable-optional-telemetry

When this option is employed, Safety will still collect the anonymized Safety Version and Safety Source. These data are required for us to be able to give our customers security protection, including security protection if Safety itself needs an update. We may also use the safety_version to alert customers of any vulnerability or risk and recommend the user upgrade.

Last updated