Security policy

Scope

This policy covers this website only: the pages served from aidefensestack.com, the files they load and the way the site is built and delivered. The site is static. It has no user accounts, no comments and no forms that send data to us.

It does not cover the products of the vendors we list, or the sites we link to. A weakness in a listed product goes to that vendor, through its own security policy. We do not test or run the listed tools, and we cannot fix them. Weaknesses in Cloudflare or Google services go to those providers.

How to report

Write to [email protected] . There is no contact form. Include:

• The page address, or the file, where you saw the problem.
• What you did, what happened, and what you expected, in enough detail for us to repeat it.
• What you think the impact is.

We do not publish an encryption key, so keep the report to what we need to reproduce the problem. Please do not access other people's data, run denial-of-service tests or send large volumes of automated requests, and give us time to fix the problem before you publish details.

What to expect

We aim to reply within 5 business days to say whether we can reproduce the problem. We fix confirmed problems on the site and may ask you for more detail along the way. This is a target, not a guarantee.

No bounty

We do not run a bug bounty and we do not pay for reports.

security.txt

The same contact, policy link and an expiry date are published in machine-readable form at /.well-known/security.txt.