Reducing unnecessary exposure
A lightweight, primarily static website helps minimise unnecessary application complexity and potential points of exposure.
Security
Responsible disclosure and security posture.
Security is central to the way we develop and share our technical projects. If you identify a potential vulnerability affecting McHughCyber.io, we welcome responsible reports that help us investigate and address security concerns while protecting users and systems.
Posture
How we approach website security.
Our approach prioritises a limited attack surface, careful handling of sensitive information and clear channels for reporting security concerns. These principles guide how we maintain and improve McHughCyber.io.
Protecting access and credentials
We treat deployment credentials and other sensitive information as protected resources, separate from publicly accessible website content and source code.
Helping us address security concerns
If you identify a potential security issue, please contact McHughCyber with a clear description and non-invasive supporting details.
Responsible disclosure
How to report a security concern
We welcome good-faith reports of suspected vulnerabilities affecting McHughCyber.io. Please share what you observed without undertaking intrusive testing. Reporting a concern does not grant authorisation to test this site or any connected systems. Do not attempt denial-of-service attacks, social engineering, credential attacks, data exfiltration or access to information that is not yours.
- Describe the suspected issue, including the affected page or resource and what you observed.
- Provide non-sensitive screenshots or steps based on observations already made, where appropriate. Do not include credentials or personal data.
- Stop if further investigation would require unauthorised access, modification, disruption or collection of another person's data.
- Submit your report through the McHughCyber contact link below. We will review the information provided; no specific response timeframe is promised.
Security contact
Found a potential vulnerability affecting McHughCyber.io? Contact McHughCyber to share the details securely. Additional reporting information is available in our security.txt file.