Security disclosure policy

Last updated: <date of the last change, for example 14 October 2026>

Reporting a weakness

If you find a security weakness on work02.online, please write to <the address that receives security reports, for example security@example.com>. Describe the problem, the page or address it affects, and the steps that show it. Our contact details are also in /.well-known/security.txt.

What is in scope

The website work02.online and its pages. Services of other companies that the website uses, such as Cloudflare or OpenStreetMap, are not in scope; please report to them directly.

Rules for testing

Test only with your own data, and stop as soon as you have shown the problem. Do not read, change or delete data of others; do not slow the website down or make it unavailable; do not send spam or try to trick our staff. Give us a reasonable time to fix the problem before you tell anyone else about it.

Our promise

We confirm your report within three working days and tell you what we will do. If you follow these rules in good faith, we will not take legal action against you for your research, and we will not ask others to do so.

Rewards

We do not pay rewards. With your permission, we gladly thank you by name.