Files
zeekayandHanzo Dev 490f52abb2 say where to send a vulnerability, not just what we claim to protect
The security page listed controls and named no address, so a stranger who found
a hole had to guess one or post it publicly. The RFC 9116 file is the same fact
in the form a scanner reads first; a site without it gets reported to whatever
address someone can guess, or not at all.

The compliance claims already on this page are left exactly as they were. They
are a separate question from whether a finder can reach us.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-14 19:08:06 -07:00
..
…