Reporting a security issue

If you think you’ve found a security vulnerability on this website (sarawolpin.com), thank you for looking out for us. We’d like to hear about it.

How to report it

Send a message through the contact form and start it with “Security report”. Please include:

• the page or address affected,
• what the issue is and what someone could do with it,
• the steps to reproduce it.

Reports in English or Hebrew are welcome.

Please

• Only test with your own information. Don’t access, change or delete other people’s data.
• Don’t disrupt the site: no denial-of-service, spam or automated scanning that floods the forms.
• Give us a reasonable amount of time to fix the issue before you share it publicly.

What to expect

We read every report and will reply as soon as we can. If you’d like, we’re happy to thank you by name once the issue is fixed.

This is a small consultancy, so there is no bug bounty and we don’t offer payment for reports.

Scope

This page covers the sarawolpin.com website only. It doesn’t cover the systems of our clients or of the services we use, which have their own reporting processes.

This policy is also listed in our security.txt file.