Site

Security policy

Scope

botnetwork.tech is a static site. It has no accounts, no forms, no database and no server-side code that handles your data. Every tool runs in your browser. In scope: the HTML, scripts and headers served from botnetwork.tech and www.botnetwork.tech.

Reporting

A dedicated security contact address has not been published yet; it will appear here and in security.txt as soon as it exists. Until then, please do not post exploitable details publicly.

Protections in place

  • A strict Content Security Policy: scripts only from this origin, no inline scripts, no third-party code.
  • HTTPS only, with HSTS (two years, subdomains, preload).
  • No cookies, analytics or tracking; settings such as theme and favorites stay in your browser's localStorage.
  • Frame, referrer, permissions and cross-origin isolation headers on every response.