I do not run a bug-bounty program, nor do I have an offical security policy. I am grateful for anyone who can point out a flaw, and even more so to those that might give me some tips to fix it. However, this blog is run via personal funds and I do not have the resources or the time to properly scope and manage a bounty program. Pleae do not violate any laws, nor the terms of service or other rules set forth by my hosting providers. If you do happen upon something that you believe may be a security incident, contact information and pgp keys can be found under https://nullsec.us/security.txt Thank you, nullsec