Security
We sell evidence about security, so our own house has to be in order.
How to report a problem with this site, and what the site does and does not do with your data.
Report a vulnerability
Email dan@apextechconsulting.co with “Security” in the subject line. Include the affected URL, what you found, steps to reproduce it, and the impact you expect.
While you investigate, please:
- Only test against sentinelcyber.io and its subdomains.
- Do not access, change or delete data that is not yours.
- Do not degrade the service for other visitors.
- Give us reasonable time to fix the issue before you disclose it.
Our contact details are also published in machine-readable form at /.well-known/security.txt.
How this site is built
| Control | What it does |
|---|---|
| Content Security Policy | Only this site’s own scripts, styles and fonts can run or load |
| Strict Transport Security | Browsers always connect over HTTPS |
| Frame and referrer policies | The site cannot be embedded by other sites, and links leak as little as possible |
| Permissions Policy | Camera, microphone, location and payment features are switched off |
| No third parties | No analytics, no trackers, no cookies, and fonts are served from this domain |
| Briefing form | Requests are delivered straight to email by a mail relay. Nothing is stored on this site. |
| The domain publishes SPF and DMARC records that reject mail pretending to be from sentinelcyber.io |