Security
Found a problem? Tell me.
If you've found a vulnerability on this site, I want to know. Write to me, and I'll answer and fix it.
Report
How to report
One email.
Write to hi@alanwisper.com with “Security” in the subject. Say what you found, how to reproduce it, and what it lets someone do. If you have a proof — a script, a request, a screenshot — attach it.
Please don't publish the finding until I've fixed it.
Scope
What to test
The site itself, not its neighbors.
In scope: all of alanwisper.com — the pages, the admin, the contact form, the API.
Out of scope: load tests and floods (DoS), spam through the form, social engineering, and the services the site runs on — Cloudflare, Google Fonts, GitHub. Report those to their owners.
I don't act on scanner output without proof that the problem is real.
Rules
The rules
Good faith, both ways.
Act in good faith: leave other people's data alone, don't get in the way of the site working, and stop as soon as you see anything personal. If you follow these rules, I won't take legal action against you, and I'll treat your research as authorized.
Response
What to expect
An answer, a fix, a thank-you.
I'll confirm I got your report within 72 hours, keep you posted, and fix it. If you like, I'll name you on this page. There are no cash rewards: this is a personal site.