Found a hole in our web? Tell us.
We test other people's websites for a living, so we hold our own to the same standard. If you've found a security issue on cyberspida.com, we genuinely want to hear about it.
How to report
Email hello@cyberspida.com with "Security report" in the subject line. Please include:
- The page or URL affected.
- What you found and the steps to reproduce it.
- Any proof of concept, screenshots or requests that help us understand it.
What we promise
- We'll acknowledge your report within three working days.
- We'll keep you updated while we investigate and fix it.
- With your permission, we'll thank you publicly once it's resolved.
- We won't take legal action against good-faith research that follows this policy.
Please don't
- Run denial-of-service attacks, or anything that degrades the site for others.
- Send spam or automated mass submissions through the contact form.
- Access, change or delete data that isn't yours.
- Use social engineering or phishing against us or our hosting provider.
- Share the issue publicly before we've had a reasonable chance to fix it.
In scope
The website at cyberspida.com. Our hosting provider's own infrastructure is out of scope — please report issues with it to them directly.
Our machine-readable contact details are published at /.well-known/security.txt.