Skip to main content

Security Policy

If you believe you’ve found a vulnerability affecting ttl.zip or any TTL resource, please notify us:

  • 📧 skull@ttl.zip (PGP on request)
  • We aim to acknowledge within 7 days.

Policy

  • Coordinated disclosure only.
  • No testing against systems you don’t own or lack permission to test.
  • We do not accept tests that risk data loss or disruption.

See also: /docs/ethics.