Company information
Security
Last updated: 23 October 2026
We welcome responsible reports that help us protect visitors and improve our systems.
Report a concern
Email developer@ciuc.dev with the subject “Security report”. Include the affected address, a clear description, steps to reproduce and the potential impact. Do not include unnecessary personal information or sensitive third-party data.
Responsible testing
Please avoid privacy violations, social engineering, denial-of-service activity, destructive testing, automated traffic that affects availability, and accessing or changing data that is not yours. Stop testing and contact us if you encounter personal information or gain unintended access.
Form security
Contact and feedback submissions are processed through a same-origin Cloudflare Worker. Submissions are rate limited, size limited, validated on the server and protected by Cloudflare Turnstile. The email destination is fixed and form content is delivered as plain text.
What to expect
We will acknowledge useful reports when practical, assess their impact and prioritise remediation. We do not offer a public bug bounty or guarantee payment. We may need additional information to reproduce a report.