Security
Found a vulnerability?
How to report it – and how to check the site’s defences yourself.
How to report
Write privately – not in a public issue.
- Email [email protected], or use GitHub’s private security advisory on the repository in question.
- Describe what you found, how to reproduce it and which version it affects.
- Wi24rd confirms receipt and comes back with an assessment. Once it is fixed, we agree together on when it can be published.
Scope
- wi24rd.com
- Wi24rd FTP (latest release)
- The engine in the tingsvad.dk project
- XDRagon Monitor, once released
Good faith
If you investigate in good faith and within scope, Wi24rd will not pursue it. That means: no overload or DoS, no access to other people’s data beyond what is needed to show the problem, no social engineering, and you give Wi24rd reasonable time to fix it before you tell others.
Thanks to
No one yet. Be the first on the list.
The seal
The site’s defences, measured while you watch.
The page fetches its own security headers and looks up DNS live. Nothing here is written by hand.
Fetching …
Check for yourself: curl -sI https://wi24rd.com/
Have a useful idea?
Feature requests, bug reports and questions are welcome. Every message gets a personal reply.