Security

This page is the disclosure policy referenced by this site's security.txt file.

Reporting a security issue

Email contact@ahmadkassir.com with what you found and how to reproduce it. A PGP key isn't currently offered — please don't include sensitive account credentials in the report itself.

Responsible disclosure

Please report an issue privately and allow time for it to be addressed before any public disclosure. When testing, avoid anything that could damage data, degrade the service, or affect other users.

What to expect

A personal acknowledgment from Ahmad, not an automated ticket. There is no bug-bounty program and no guaranteed response time — this is a direct line to the person who can actually fix the issue.

Scope

This policy covers ahmadkassir.com itself. Systems built for a client are covered by that client's own security and disclosure process, not this one.

Last updated: August 10, 2026