Responsible disclosure

Found a security issue?

Thank you for looking. If you find a vulnerability on camtoan.me, please tell me privately so I can fix it.

How to report

Email camtoan.work@gmail.com with a description of the issue, steps to reproduce it, and its impact.

What to expect

• I'll acknowledge your report within 3 business days.
• I'll keep you updated and let you know when it's fixed.
• With your permission, I'll credit you publicly once it's resolved.

Please don't

• Run denial-of-service or automated high-volume scans.
• Use social engineering, phishing or physical attacks.
• Access, change or delete data that isn't yours.
• Disclose the issue publicly before it's fixed.

Safe harbor

If you act in good faith and follow this policy, I won't pursue legal action against you. This is a personal site, so there's no paid bug bounty — but there is genuine gratitude.

Machine-readable contact: /.well-known/security.txt