Responsible disclosure

Security

If you believe you have found a vulnerability in millennium-science.com or in systems we operate for a client (with their authorisation), write to security@millennium-science.com.

  • Give enough detail to reproduce. Do not exfiltrate data to prove the point.
  • Allow a reasonable window before public disclosure.
  • We prefer a quiet fix to a loud scoreboard.

A machine-readable policy lives at /.well-known/security.txt.