How to report a security issue
Email eric@entryi.co with the subject Security report for entryi.co. Include the affected URL or component, what you observed, the security impact you believe it has and the minimum reproducible steps needed to understand it.
Scope
This disclosure page applies to the public entryi.co website and public endpoints controlled by Entry I. It does not authorise access to private Entry I repositories, contractor accounts, email accounts, cloud dashboards, internal research systems or systems not publicly exposed as part of entryi.co.
Testing boundaries
If you believe you have found an issue, use only the minimum verification needed to describe it. Stop if testing would require accessing another person's data, obtaining private credentials, installing persistence, conducting denial-of-service, social-engineering people, sending spam or materially disrupting the website or a third-party service.
Third-party services
The public site uses services such as Netlify for hosting and form handling and links to third-party websites. This page does not authorise security testing of Netlify, LinkedIn, linked source websites or any other third-party infrastructure.
If an issue is clearly in a third-party service rather than entryi.co, report it through that provider’s own security or responsible-disclosure process.
What to expect
Reports are reviewed as capacity allows. Entry I may ask for clarification, reproduce the issue, coordinate with an affected provider and make a fix before discussing the issue publicly. There is currently no public bug-bounty programme and no promise of payment or reward.
Disclosure boundary
This page deliberately does not describe protected internal architecture, enforcement mechanisms, test suites or security-control implementation. Publishing a responsible-disclosure route is not a claim that the website or future Entry I systems are vulnerability-free.
Machine-readable contact
A machine-readable security.txt file is published at the standard well-known path for security researchers and automated discovery.