Privacy & Terms
What I collect when you contact me, how it's used, and the ground rules for any business launch, website, product, platform, or application security work. No dark patterns, no data resale.
When you send the contact form, your name, email, inquiry type, timing, message, and any optional details are submitted to my private inquiry inbox. The form can also include the referring page and campaign tags from the link you followed. The readiness self-check remains in your browser unless you choose to email its result.
To respond to you, prepare a recommendation and quote, and keep a record of our conversation. I don't sell your data, share it with advertisers, or add you to marketing lists without your say-so.
The site and private inquiry database use Cloudflare. A successful contact confirmation means your inquiry was saved; it is not a guarantee that an email notification was delivered. To limit spam and duplicate submissions, the form also stores a one-way keyed hash of your IP address and a submission reference. If online intake is unavailable, the form clearly offers an email draft that you send yourself.
I keep inquiry records only as long as useful for responding to you and our working relationship. Email [email protected] any time to ask what I hold, correct it, or have it deleted.
Security testing is performed only with written authorization, a defined scope, explicit testing boundaries, and documented handling of findings.
No testing happens until scope, targets, and authorization are confirmed in writing. Testing is limited strictly to systems you own or are authorized to assess.
Findings, access details, and your business information are treated as confidential and can be covered by a mutual non-disclosure agreement.
You receive clear findings: plain-language consequence for leadership, reproducible technical detail for implementers, and prioritized remediation guidance—with retest validation when included in the agreed scope.
Security researchers can report issues with this site responsibly via /.well-known/security.txt.
Email me directly and I'll answer plainly.