Security

Contact

Email: security@cp2co.de

Please include the affected URL, steps to reproduce, expected vs. actual behavior, and (if relevant) a minimal proof of concept.

Scope

• This is a static-first site. If you find a real issue, I appreciate responsible disclosure.
• No bug bounty program.
• Please do not run disruptive scans or denial-of-service tests.

Non-issues

Some rough edges are intentional or already known:

• An intentionally expired TLS certificate on a legacy endpoint.
• “Not perfect” SSH hardening choices on personal infrastructure when there is no practical exploit.