Security Policy

Overview

Seeking Light is a statically generated photography website. We take security seriously and value responsible reports that help us protect the site and its visitors.

Scope

This policy applies to the following domains and systems:

• seekinglight.app and www.seekinglight.app
• First-party services operated by Seeking Light
• Associated web services and endpoints that are part of the site

Reporting a Vulnerability

If you discover a security vulnerability, please:

1. Email your findings to contact@seekinglight.app
2. Include the affected URL or component, reproduction steps, and impact
3. Include a proof of concept or supporting material where safe
4. Wait for acknowledgment and coordinate disclosure with us

What to Include in Your Report

• Description of the potential impact
• A detailed description of the vulnerability
• Step-by-step instructions to reproduce the issue
• Proof of concept if available
• Any relevant screenshots or supporting materials

Response Process

1. Acknowledgment of receipt within 48 hours
2. Initial assessment and verification within 5 business days
3. Regular updates on the progress of the fix
4. Notification when the vulnerability is fixed

Out of Scope

• Denial of Service (DoS), stress, or high-volume testing
• Spam or social engineering attacks
• Physical security attacks
• Third-party applications or dependencies without a Seeking Light-specific impact
• Best-practice findings without an exploitable security impact

Recognition

We value the security research community and will:

• Acknowledge your contribution if requested
• Keep you informed throughout the process
• Work with you on the disclosure timeline

Verified contributions can be recognized on our Security Acknowledgments page.

Legal Notes

We will not pursue legal action for good-faith research that:

• Make a good faith effort to follow this policy
• Does not compromise user privacy
• Does not disrupt our services or destroy data
• Stops promptly when a vulnerability is confirmed

Contact

For security-related inquiries, please contact:

Email: contact@seekinglight.app