● Site Security
Given what this site is about, it should hold up to scrutiny. If it doesn't, here's how to tell me.
● Found Something?
If you've found a genuine security issue with this site or its infrastructure, reach out directly rather than disclosing publicly first. Include enough detail to reproduce the issue — vague reports without steps are hard to act on quickly.
● What To Expect
This isn't a formal bug bounty program with guaranteed payouts — it's a personal site. Genuine, responsibly disclosed findings will be acknowledged and fixed; credit is happy to be given if wanted.
● For Context
Self-hosted on a hardened Linux VM, nginx with enforced HTTPS, and a self-built API backend with input validation and rate limiting on anything that accepts public input.