Security

Report a security issue

If you find a vulnerability, I would rather hear about it from you than from a graph in my monitoring. Share the details and I will investigate.

Email security Trust centre

Please do not include secrets, payment details, or personal data unless it is strictly needed to demonstrate the issue.

How to report

Email me at ransford.amponsah@ransfordsnotes.com.
Include steps to reproduce and what you expected to happen.
Tell me the impact in plain terms. A short threat model is welcome.

What to include

The affected URL or feature and any relevant account type.
A proof of concept that is safe and minimal.
Screenshots are fine. Please blur anything sensitive.

Safe harbour

If you act in good faith, avoid privacy violations, and do not disrupt the service, I will treat your report as a helpful contribution. My aim is to fix issues, not to play legal games.

Out of scope

Denial of service attempts and anything that degrades availability.
Social engineering, phishing, or physical access attempts.
Issues in third party services. Please report those to the vendor.

What happens next

I will acknowledge your message as soon as I can, usually within a couple of working days.
If I can reproduce the issue, I will prioritise a fix based on impact.
When it is fixed, I will close the loop. If you want credit, say so in your email.

Privacy OWASP Top 10

Preparing the page...