Using this site
This site publishes security research for education and defence. By using it you agree to these terms.
Authorised use only
Do not use anything here to access, test or disrupt systems you do not own or have explicit permission to assess. You are responsible for how you use the information.
Reporting issues to me
Good-faith security research on this website that stays within the scope will not be met with legal action from me. Do not access other people's data, degrade the service or test third-party services through this site.
Published content
Case studies and lab write-ups are anonymised. Do not try to re-identify the organisations or people they describe. Material here is published after the issue it describes has been fixed and contains no exploit payloads; do not ask me for them.
Analytics, forms and subscriptions
This site uses privacy-friendly analytics. The contact and newsletter forms are processed by Formspree and protected by Google reCAPTCHA; you can also subscribe to updates by RSS or email. See the Privacy Policy for the details.
No warranty
Content is provided as is, without warranties of any kind. It is not professional advice and does not create a client relationship. Findings and mitigations may be incomplete or out of date.
Liability
To the extent permitted by law, I am not liable for loss or damage arising from use of this site or reliance on its content.
Links and changes
I am not responsible for third-party sites linked here. I may update these terms at any time; continued use means you accept the current version. Intellectual property is covered on the Copyright page.