Security

Vulnerability disclosure policy

We hold ourselves to the standard we test others against. If you find a security issue in our site, we want to hear about it.

Report a vulnerability

Report through our form

Choose “Report a security vulnerability” on the contact form.

Reply in 3 business days

We acknowledge every report and keep you updated until it’s fixed.

Safe harbor

Good-faith research under this policy is authorized. We won’t take legal action.

Last updated: November 9, 2026

How to report

Use our contact form and choose Report a security vulnerability as the service of interest. Please include:

  • The affected URL or component
  • A description of the issue and its potential impact
  • Steps to reproduce it, including any proof of concept
  • How we can reach you for follow-up

Please don’t include sensitive data in your first message. We’ll arrange a secure channel if one is needed.

Scope

In scopecaesium55.com and its subdomains.
Out of scopeThird-party services we use, such as our hosting and email providers. Please report those to the vendor directly.

Guidelines

When researching, please:

  • Make a good-faith effort to avoid privacy violations, data destruction and service disruption
  • Access only the minimum data needed to demonstrate the issue, and don’t keep or share it
  • Not perform denial-of-service, spam, social-engineering or physical testing
  • Give us reasonable time to fix the issue before disclosing it publicly

What to expect from us

  1. AcknowledgeWithin three business days of your report.
  2. InvestigateUpdates as we confirm and fix the issue.
  3. CreditRecognition for your discovery once resolved, if you’d like it.

Safe harbor

If you follow this policy in good faith, we consider your research authorized, we will not pursue legal action against you for it, and we will work with you to understand and resolve the issue quickly.

We don’t currently offer a paid bug bounty.