Responsible disclosure

Found a security issue?

Thank you for looking. If you find a vulnerability on kamllistos.com, please tell me privately so I can fix it.

How to report

Email official@camtoan.me with a description of the issue, steps to reproduce it, and its impact.

For sensitive details, encrypt your message with my PGP key. Fingerprint: 9083 9B9E C1CD 87EB C933 EB78 49A2 57EE 9CAE 466F

What to expect

• I'll acknowledge your report within 3 business days.
• I'll keep you updated and let you know when it's fixed.
• With your permission, I'll credit you publicly once it's resolved.

Please don't

• Run denial-of-service or automated high-volume scans.
• Use social engineering, phishing or physical attacks.
• Access, change or delete data that isn't yours.
• Disclose the issue publicly before it's fixed.

Safe harbor

If you act in good faith and follow this policy, I won't pursue legal action against you. This is a personal site, so there's no paid bug bounty — but there is genuine gratitude.

Machine-readable contact: /.well-known/security.txt