Security

How this site is built, and how to tell us if you find a problem.

Reporting a vulnerability

If you find a security issue in this site or in any Coherence Energy Labs™ software, email josh@coherenceenergylabs.com with enough detail to reproduce it. You will get a human reply. Please give us a reasonable window to fix the issue before public disclosure; we will credit reporters who want credit.

Machine-readable contact details are published at /.well-known/security.txt.

How the site is built

The site is static HTML and CSS served by a Cloudflare Worker. It ships no executable JavaScript, sets a strict Content-Security-Policy, HSTS, and frame denial, and stores no visitor data. The attack surface is intentionally small.