Security

Website safeguards

The website is served over HTTPS and uses browser security, framing, referrer, and permissions policies. Contact submissions are validated, size-limited, protected with basic bot traps, and sent through a configured email provider rather than exposed publicly.

Responsible disclosure

If you believe you found a security vulnerability, email hello@cortex-stack.ai with the affected URL, reproduction steps, and potential impact. Please avoid accessing, changing, or retaining data that does not belong to you. Our machine-readable disclosure contact is at /.well-known/security.txt.

Client systems

Security controls for client work are defined per engagement. Depending on scope, that may include identity and role mapping, tenant isolation, audit trails, encryption, secrets management, dependency review, evaluation gates, logging, incident runbooks, and deployment within a client-controlled cloud environment.

Certifications and claims

This page does not claim a certification, independent audit, or universal compliance status. Any engagement-specific requirement is confirmed in writing and supported by evidence appropriate to that scope.

Privacy

See the Privacy Notice for information about data processed by this website.