Security Policy

Last updated: 30 May 2026

trevor.leadley.ca is a personal portfolio site. Unauthorized scanning, probing, or testing is not welcome.

Reporting Security Issues

If you believe you have found a legitimate security vulnerability, please report it responsibly to:
security@leadley.ca

For sensitive reports, please encrypt your message with my PGP key.

Scope & Expectations

• Only reports for issues on trevor.leadley.ca and its subdomains will be considered.
• Automated scanning or active probing without explicit prior permission is prohibited.
• I reserve the right to pursue legal action in cases of unauthorized access attempts, data exfiltration, or disruptive activity.

Safe Harbor

Safe Harbor protection applies only to researchers who have received explicit written permission in advance. All other activity is considered unauthorized.