Responsible Disclosure Policy

We welcome good-faith reports of security vulnerabilities affecting this website or services we manage.

How to Report

Email a description of the issue to hello@cyberdairy.com, including steps to reproduce, affected URL(s), and potential impact. Avoid including sensitive data in your report.

What We Ask

Give us a reasonable opportunity to investigate and address a report before any public disclosure. Do not access, modify, or delete data beyond what's necessary to demonstrate the vulnerability. Do not run automated scanning tools that could degrade service for others.

What to Expect From Us

We will acknowledge good-faith reports and keep you reasonably informed of progress. We do not currently operate a paid bug bounty program.

Scope

This policy covers this website and infrastructure we directly manage. It does not cover third-party services we integrate with (e.g. Crossref, payment processors), which have their own disclosure processes.