The external evidence base is mixed but better than for many young infrastructure startups. There is no current G2/Capterra/TrustRadius-style corpus or independent exact-product benchmark. The sparse mature review coverage limits independent comparison with established scraping/data vendors.
Product Hunt provides the most useful current user evidence. The exact-product review page shows 4.9/5 from 15 reviews at capture time, with reviewers repeatedly praising clean Markdown, integration speed, SDK ergonomics, concurrency, responsive support and the ability to replace separate scraper/proxy/cleanup layers.10 Reported weaknesses include documentation/examples, brand-color extraction and uncertainty about how target-site robots.txt or Terms changes are surfaced to customers.10
The 4.9/5 Product Hunt rating should not be treated as a robust exact-product performance score. Thirteen of the 15 visible reviews are categorized as founder reviews, and the product has been launched/promoted on the same platform.10 The comments are valuable because several identify concrete production use cases and alternatives, but the sample is small and unusually founder-heavy; the rating is therefore best treated as qualitative user evidence.
Context.dev publishes significant first-party customer evidence. Its current customer page lists teams using the service for web search, crawling, branding, site monitoring and enrichment, including claims such as Bystreet completing more than one million scrapes without an issue and Adapt monitoring roughly 6,000 websites.11 These are useful workload descriptions and show a real production surface, but they are vendor-selected case studies rather than independent reliability statistics.
The public status page provides a more directly measurable operational signal. At capture, core scraping endpoints showed roughly 99.976%–100% uptime over the displayed 30-day window, with Markdown/HTML endpoints at 99.988% and several other endpoints at 100%.12 This is vendor-operated telemetry, not an audited SLA measurement, but it is more informative than a generic “high availability” claim and gives teams something concrete to monitor over time.
Security/compliance maturity has improved materially. Context.dev announced SOC 2 Type 1 compliance in May 2026 covering Security, Availability and Confidentiality, and its Trust Center shows SOC 2 Type 1 compliant with Type 2 still in progress.1314 Enterprise pricing separately advertises a 99.9% uptime SLA.4 Type 1 assesses design of controls at a point in time; it should not be represented as the longer operating-effectiveness evidence that a completed Type 2 report would provide.
The DPA is comparatively substantive. It defines Context Dev Inc. as processor for Customer Personal Data, requires processing on documented instructions, includes GDPR/CCPA commitments, sets subprocessor-change notice, contains security obligations and gives customers audit rights.15 Following cessation of relevant services, it states that Customer Personal Data should be returned or deleted promptly and in any event within 10 business days, subject to legal/backup exceptions.15
Context.dev also publishes a subprocessor page rather than forcing procurement teams to discover every vendor during sales. The list identifies processors, location/purpose and data categories, while the DPA provides a 14-day notification mechanism for intended additions/replacements.1615 That is stronger governance documentation than a generic privacy policy alone.
The general Privacy Policy was updated August 20, 2026. It describes account and usage data, third-party/analytics sharing, international transfers, data-subject rights and retention based on business/legal necessity rather than a universal fixed period.17 It says servers are in the United States and describes protections for international transfers. It also says the company does not currently respond to DNT browser signals but honors recognized opt-out preference signals such as GPC where applicable.17
The biggest trust weakness is inconsistency between the legal documents and the product now being sold. The Terms were also updated August 20, 2026, yet their opening description still frames the service mainly as a brand-data platform.18 More importantly, the user representations say a user will not access the Services through automated/non-human means, and the prohibited-activities section broadly bans automated system use, robots, scrapers and similar tools accessing the Services.18 Read literally across the defined “Services,” that conflicts with a product whose primary interfaces are APIs, MCP, SDKs and automation integrations for agents.
There may be an intended distinction between unauthorized automation against Context.dev’s own website and authorized API usage, but the current wording does not express that distinction cleanly.18 This is not a theoretical drafting nit: developers need contractual certainty that normal programmatic API/agent use is authorized. Context.dev should update the Terms so the automation restrictions clearly exclude documented API/MCP/SDK use.
The DPA shows a related scope lag. It says the Services are designed to retrieve brand/company information and do not require customers to submit end-user personal data, while the current pricing surface now includes a People Enrichment endpoint capable of enriching a person from email/social profile or name plus contextual attributes.154 The DPA still offers strong processor obligations, but privacy-sensitive buyers using people enrichment should confirm that the current contract/DPA schedule explicitly covers the real data categories and processing paths they intend to use.
Scraping compliance is intentionally allocated to the customer. Context.dev’s public materials state that customers are responsible for respecting target-site Terms of Service, robots.txt, rate limits and applicable privacy/data-protection law.25 Its engineering guidance itself recommends checking robots.txt, preferring official APIs where appropriate, avoiding authentication/paywall bypass without permission and minimizing collection.19 That is responsible guidance.
There is nevertheless tension between that guidance and the product’s technical sales message. Context.dev also advertises automatic proxy escalation, realistic browser fingerprints, JavaScript rendering, CAPTCHA/anti-bot capabilities and Cloudflare-style bypass as managed features.51 Technically bypassing a block and legally/contractually being entitled to collect the data are separate questions. Context.dev correctly places legal responsibility on customers, so adopters need their own allow/deny policy rather than assuming the API will enforce every target’s terms on their behalf.
The monitor feature introduces a similar compliance dependency. A Product Hunt reviewer specifically asked for clearer visibility into what happens if a target changes robots.txt or its Terms after a pipeline has already been built.10 Context.dev’s general materials say customers are responsible for those policies; the reviewed monitor documentation does not establish a universal automatic legal-policy change gate. Teams using long-lived monitors should therefore maintain their own target-policy governance for sensitive domains.
The evidence supports medium confidence. Context.dev has transparent pricing, a real customer surface, current status telemetry, SOC 2 Type 1, a public DPA/subprocessor regime and a modest exact-product user corpus. Confidence is held below high primarily by the absence of independent benchmarking/large review populations and by legal-document synchronization problems that are especially important for a scraping/people-data infrastructure vendor.