Security

This policy covers the site available at axiomtruenorth.com: its code, its server configuration, and the forms it exposes (quote request, estimator, domain diagnostic).

It does not cover third-party accounts or services mentioned on this site (hosting provider, email provider), nor a site delivered to a client under a different domain name: a vulnerability on one of those sites should be reported to its actual owner.

Write to us with as much detail as possible: the URL or entry point involved, the steps to reproduce the issue, and its impact as you understand it.

The contact details above are the same ones already published in the security.txt file, in the same format: the second one allows sending an encrypted message, whose fingerprint is also included in the file itself.

A personal acknowledgment within 72 hours, never an automated ticket. Once the report is verified, you're kept informed of the fix in progress; no public disclosure on your part is requested before it's deployed.

This site does not currently offer a financial reward for reports: if such a program is introduced, it will be announced right here, with clearly published terms and a cap, never introduced along the way.

1. Never access, modify, or delete data that isn't yours beyond what's strictly necessary to demonstrate the vulnerability.
2. Never use a vulnerability to disrupt the service (denial of service, mass sending) or to harm third parties.
3. Give us a reasonable amount of time to fix the issue before any public disclosure.