Security of this website
Responsible vulnerability disclosure
If you find a possible vulnerability in sentinelawp.com.br, email me. I read and reply to reports personally.
How to report it
Send your report to zenitih@proton.me.
- The affected URL and a description of what you observed.
- Minimal steps to reproduce, without accessing anyone else's data or changing the site.
- The possible impact and, if useful, screenshots with sensitive information redacted.
Scope and precautions
This policy covers only sentinelawp.com.br. It does not include client websites or third-party domains.
Do not access, copy or expose anyone else's data. Do not change files, maintain access or disrupt the service.
This page does not authorize automated scanning, brute-force attacks, social engineering or intrusive testing. Contact me first if confirming your suspicion requires more than a non-invasive observation.
If you encounter sensitive data by accident, stop and let me know without including it in the email. We can agree on a safe way to handle the evidence.
After your report
I review what you send and discuss the fix and any disclosure directly with you. Please do not publish details that would allow exploitation while we work that out.
I won't take action against good-faith reports that follow this policy.
I do not run a bug bounty program or offer payment for reports.