We use cookies
We use cookies to improve experience and measure performance. You can accept or reject non-essential cookies at any time.
This site is a static portfolio with a single contact API. The security policy below covers how vulnerabilities are handled.
If you find a security issue, please email the address below with details and reproduction steps. Please do not open a public GitHub issue for security reports.
In scope: this website and its API routes (contact form, CSP reporting). Out of scope: automated volumetric scanning, spam through the contact form, and anything on third-party services (GitHub, LinkedIn, Resend, Sentry).
Acknowledgement within 7 days, an assessment within 30 days. Fixes are prioritized by severity and deployed continuously.
Good-faith research that respects user data and service availability will not be met with legal action.