Privacy policy.

We collect as little data as possible. This page describes exactly what happens with it.

What we collect

• Contact form: the name, email, company and message you submit. We use them to reply to you, and for nothing else.
• Newsletter: the email address you subscribe with, used to send you new articles. Every email includes a way to unsubscribe, and you can also just reply and ask.
• Server logs: our web server keeps standard access logs (IP address, user agent, requested pages) for security and reliability, retained briefly and reviewed only when something needs investigating.

This website does not set advertising or analytics cookies.

Where it goes

Form submissions are delivered to our team's internal messaging workspace so a human can respond quickly. We don't sell, rent or trade your information with anyone.

Third-party services

Some pages load resources from third parties, which may receive standard request data (such as your IP address) when your browser fetches them: Google Fonts (typography), YouTube (embedded video) and Google Calendar (the booking link). Their own privacy policies govern that processing.

Client and engagement data

Vulnerability reports and program data we handle for clients are governed by the agreements we sign with those clients (not by this website policy) and are treated as confidential in all cases.

Your choices

Want the data you submitted corrected or deleted, or have any question about this policy? Use the contact form and tell us. A human will handle it.