Security Policy
Thank you for helping keep turczynski.pl resilient. This page outlines how to report security issues and how to test the site responsibly.
Responsible Disclosure
- Email security@turczynski.pl (PGP available on request) and include a short proof-of-concept.
- Provide enough detail for reproduction. Automated scanner dumps without a clear finding may be deprioritised.
- Please allow 5 business days for acknowledgement and refrain from public disclosure until the issue is fixed or 30 days have elapsed.
Safe Harbor
Test systems responsibly:
- No social engineering, destructive testing, or privacy violations.
- Limit automated traffic to a reasonable rate.
- Do not access other visitors’ data.
Good-faith security research that complies with these rules will be viewed as authorised.
Status & Contact
- Contact: security@turczynski.pl
- Updates: changes to this policy are published on this page.
Machine-readable contact details are at /.well-known/security.txt.