Disclosure

Report a security issue.

If you find a vulnerability in this site or its infrastructure, please report it privately. Do not open a public issue with exploit details.

Contact

mailto:security@watchfloor.report

Machine-readable contact and expiry: /.well-known/security.txt.

Scope

• This site’s application code and public endpoints
• Authentication and authorization on /admin
• Data exposure or injection through submitted links
• Denial-of-service issues that are reproducible and not volumetric

Out of scope

• Volumetric DDoS
• Social engineering of the maintainer
• Automated scanner output without a reproducible impact
• Third-party services we link to

What to include

A short description, reproduction steps, impact, and any suggested fix. Please give us a reasonable window to respond before publishing.

We will not pursue legal action for good-faith research that follows this policy and does not access or modify other people’s data.