Security

Found something? Tell us.

We hold our own site to the standard we bring to client systems. If you find a vulnerability, we want to hear about it and we will work with you in good faith.

01

Scope

  • suddennorth.com and its subdomains operated by Sudden North, LLC.
  • Third-party services we use (hosting, form processing, analytics) are out of scope; please report issues in those directly to the provider.
02

How to report

  • Email contact@suddennorth.com with “Security” in the subject line.
  • Include the affected URL, a description of the issue, steps to reproduce, and its potential impact. Screenshots or a short proof of concept help.
03

What we ask

  • Make a good-faith effort to avoid privacy violations, data destruction, and service disruption.
  • Only interact with accounts or data you own or have explicit permission to access.
  • Do not run denial-of-service, social engineering, physical, or spam testing.
  • Give us reasonable time to fix the issue before sharing it publicly.
04

What you can expect

  • Acknowledgment within three business days.
  • An honest assessment and regular updates until the issue is resolved.
  • Credit for your finding, with your permission, once it is fixed.
  • We will not pursue legal action against research conducted in good faith under this policy.

Machine-readable contact details are published at /.well-known/security.txt (RFC 9116).