Trust · Policies

Security policy.

How this website is protected, and how to report a problem. It makes no certification claims.

How the site is built

  • The site is static files. There is no application server or database to attack.
  • A strict Content-Security-Policy allows scripts, styles, fonts and images from the site's own origin only.
  • There are no third-party scripts, trackers, fonts or embedded widgets.
  • Transport security and content-type headers are set by the host.

What this does not mean

W5D holds no security certification, such as SOC 2 or ISO 27001, and has had no independent penetration test. Earlier template copy that implied otherwise was removed.

Reporting a vulnerability

Write to to be confirmed with the address of the page and how to reproduce the problem. A response time is not promised here because none has been decided: to be confirmed.