Security

Our approach

We treat security as part of product and software quality. Controls for client work are defined according to the project, its data, and the written agreement governing that engagement.

This website

This is a static informational site. It does not provide user accounts, collect payment card information, or accept form submissions. Project inquiries are sent through your email provider.

Responsible disclosure

If you believe you found a vulnerability affecting this site or a system we operate, email support@luckypenny.co with a clear description, the affected location, reproduction steps, and potential impact.

Please do not access data that is not yours, disrupt services, use destructive testing, or disclose an unresolved issue publicly. We will review good-faith reports and respond as circumstances allow.

Client systems

Security reporting instructions for a client-owned product may differ. If another organization owns the affected system or data, contact that organization through its published security channel.

No certification claim

This page describes our current public-site posture and reporting channel. It does not represent that the company or every client project holds a particular certification, audit, or compliance status.