Security
If you've found a security issue in pentaroot.com or its email setup, please tell me at security@pentaroot.com.
How to report
- Describe the issue and the affected URL or host.
- Don't include exploit payloads or sensitive data in a first email. I'll reply and we'll agree a safe way to share details.
- Please don't access data that isn't yours, disrupt the site, or test with social engineering.
What to expect
I'll acknowledge your report within three business days, keep you updated, and credit you if you'd like. There's no bug bounty. I won't pursue action against good-faith research that follows this policy. This policy doesn't authorize any testing beyond these rules.
I don't publish a PGP key at the moment.