Responsible Disclosure

Last updated: October 14, 2026

Reporting a vulnerability

I welcome good-faith reports of security issues. If you believe you have found one on sefat-371.netlify.app, please report it by email to sefat371@yahoo.com. Use the subject “Security report”.

What to include

• A clear description of the issue and the affected page or URL.
• Steps to reproduce it, and screenshots or a proof of concept where helpful.
• The impact you believe it could have.
• Supporting evidence, such as the browser, request or response involved. Please do not include other people’s personal data.
• Your name or handle if you would like credit.

Please do not

• Access, change, copy or delete data that is not yours, or go beyond what is needed to show the issue.
• Disrupt the service, for example with denial-of-service attacks or by flooding the contact form or chat.
• Use social engineering, phishing or spam.
• Publicly disclose the issue before we have had a reasonable chance to coordinate and fix it.

What to expect

I will acknowledge reports as soon as I can, look into them in good faith, and let you know when the issue is resolved. This is a personal website, so I cannot promise a response time, and there is no paid bug bounty program or reward. This policy does not give legal permission to test or any form of legal immunity, so please act lawfully.

Scope

In scope is this website at sefat-371.netlify.app, including its browser tools, contact form and AI chat function. Third-party services such as the hosting provider, Google or social platforms are outside my direct control. Please report issues in them to their owners’ own security teams. If you are not sure where an issue belongs, email me with what you found.