Security Policy

I take the security of this site seriously. If you have discovered a vulnerability, I appreciate you letting me know responsibly.

This policy covers isaacadjei.me and all its subdomains. It does not cover third-party services or infrastructure I do not control.

• Cross-site scripting (XSS)
• Cross-site request forgery (CSRF)
• Authentication or authorisation bypass
• Sensitive data exposure
• Server-side injection vulnerabilities

Please send vulnerability reports by email to [email protected] with the subject line Security Disclosure. Include a clear description of the issue, steps to reproduce and any supporting evidence such as screenshots or proof-of-concept code.

Please do not publicly disclose the issue until I have had a reasonable opportunity to investigate and address it.

Good Faith

I will not take legal action against researchers who act in good faith, follow this policy and do not access, modify or delete data beyond what is needed to demonstrate the vulnerability. Valid reporters will be acknowledged on the Hall of Fame.