Security

Last updated: 22 October 2026

We welcome responsible reports that help us protect visitors and improve our systems.

Report a concern

Email developer@ciuc.dev with the subject “Security report”. Include the affected address, a clear description, steps to reproduce and the potential impact. Do not include unnecessary personal information or sensitive third-party data.

Responsible testing

Please avoid privacy violations, social engineering, denial-of-service activity, destructive testing, automated traffic that affects availability, and accessing or changing data that is not yours. Stop testing and contact us if you encounter personal information or gain unintended access.

What to expect

We will acknowledge useful reports when practical, assess their impact and prioritise remediation. We do not offer a public bug bounty or guarantee payment. We may need additional information to reproduce a report.