portfolio :: security disclosure policy

Introduction

This document outlines the process for reporting security vulnerabilities related to this portfolio website.

Reporting

Send details to marius.vanzundert@cerberos.dev. Encrypt sensitive information using the PGP key at /.well-known/pgp-key.asc.

Please include: a description of the vulnerability, steps to reproduce or a proof of concept, and your preferred acknowledgement.

Response

I will acknowledge receipt within 72 hours and provide an initial assessment within 7 days.

Safe Harbor

I consider vulnerability research conducted under this policy to be authorised. I will not pursue legal action against researchers who follow this policy and give me reasonable time to respond before disclosing publicly.