Trust Centre
How we handle security and data on this site.
As a cybersecurity consultancy, we hold this site to the standard we'd expect our clients to hold theirs to.
How this website is built
This site is a static application with no server-side rendering of user data. The only data it collects directly is what you submit through the contact form, sent to a database with row-level security that restricts anyone, including us, through the public API, from reading, listing or exporting entries except through authenticated, access-controlled tooling.
What we don't do
We don't sell visitor data, run third-party ad trackers, or share form submissions with anyone outside ITTCsec. Analytics, when enabled, run only after consent.
Infrastructure approach
Production changes go through a staged process (development, staging, then production) rather than being edited live. See our Responsible Disclosure policy for how to report a security issue.
Security contact
If you've found a security issue on this site, see the Responsible Disclosure page for how to report it safely.
See also: Responsible Disclosure and Privacy Policy.