security · 3,000 m
Security
If you've found a security issue on this site or in Batesian, please let me know.
reporting
Email security@calbebop.dev (also in security.txt) with steps to reproduce.
scope
in scope
- calbebop.dev
- Batesian
out of scope
- Third-party services this site relies on. Report those to the provider.
- Social engineering, phishing, or physical attacks.
- Denial-of-service or volumetric testing.
- Automated scanner output with no proof of exploitability.
- Missing headers or hardening on pages with nothing sensitive on them.
This site has no user accounts and collects no personal data.
what to expect
It's just me, so these are targets rather than promises:
- Acknowledge your report within 48 hours.
- Initial assessment within 7 days.
- A fix or coordinated disclosure within 90 days.
I'll keep you updated while I work on it.
safe harbor
If you act in good faith and don't degrade the site for anyone else, I won't take legal action. Stop once you've shown the issue.
rewards and credit
There's no bounty. If you report a valid issue, I'll credit you however you'd like.