Security
Security information
How this site protects you, and what this page does not offer.
About this page
This page describes the protections of the public Risksquad website. It is not a vulnerability reporting endpoint, a disclosure program or authorization to test Risksquad services.
We do not currently publish a public vulnerability reporting channel or offer a paid bug bounty. This site does not accept reports or attachments.
Issues in third-party services, such as AWS, Google, Auth0 or GitHub, belong with their owners’ security programs.
How this site is protected
- HTTPS everywhere, with HSTS.
- A strict Content Security Policy that allows only our own origin.
- No third-party code on the site: no analytics, ads or trackers.
- A static site, with no forms, accounts or submission endpoints.
How we handle personal data is in the Privacy Policy.