Our domains

squidler.app

squidler.app is owned and operated by Squidler AB, a company registered in Sweden — the company behind squidler.io. The domain is registered in our name, and you can check that in its public registration record.

Squidler gives businesses AI agents that work alongside their teams. Those agents can build small web apps for the people they work for — a dashboard, an internal tool, a booking page, a form. Each app is published at an address of its own, <name>.squidler.app.

Why a separate domain

Apps live apart from squidler.io for security. An app on its own domain cannot read or use anyone's Squidler account, and each app is kept apart from the others. It is the same arrangement many hosting platforms use for their customers' sites.

Whose app is it?

Every address on squidler.app is an app published by one of our customers, for their own purposes. The customer decides what the app does and who may use it. Squidler hosts it.

  • Apps are private unless the customer opens them. A private app can be opened only by the people the customer has let in, and everyone else is asked to sign in.
  • Signing in to an app happens on Squidler's own site, at squidler.io or login.squidler.io, never inside the app.
  • Be wary of an app that asks for the password to another service — your bank, your email, Microsoft or Google. Do not enter it, and report the app to us.

The rules apps are published under

Every customer agrees to our Terms of Service, which forbid using Squidler for phishing, fraud, spam, social engineering, impersonation, or anything illegal or harmful. An app that breaks them is taken down, and so is the account behind it when that is warranted.

Report an app

If you think an app on squidler.app is deceptive, harmful or misusing your brand, write to security@squidler.io. Include the full address of the app and what you saw. Every report is read by a person at Squidler.

The same contact is published, in the standard machine-readable form, at squidler.app/.well-known/security.txt and at the same path on every app.

For IT and security teams

If your company uses Squidler and its apps are blocked on your network, there are two ways to let them through without trusting every app on the domain:

  • Allow your own apps by their exact address, such as reports--acme.squidler.app, rather than all of *.squidler.app.
  • Publish the apps on your own domain, such as reports.example.com. Your filters then judge them by your domain. Your agent can set this up — here is how.

For anything else — a question from your security review, or a classification you would like us to take up with a vendor — write to security@squidler.io.