Security Policy
How to report a vulnerability and assess lab guidance before production use.
Vulnerability Reporting
If you discover a security vulnerability in the public site, build/deploy pipeline, or repository artifacts, email bruno@bwotec.com. Include the affected component or URL, expected impact, minimal reproduction steps, sanitized evidence, and a suggested fix if available.
Do not open a public issue with vulnerability details, credentials, personal data, or internal infrastructure information. Do not send real secrets as evidence.
Response
The project is maintained individually and does not offer an SLA, reward, or bug bounty. Reports are handled on a best-effort basis through the responsible-disclosure process.
Lab Simulations Notice
Most articles published on bwotec describe configurations tested in controlled laboratory environments, such as EVE-NG or PNETLab, often with basic or evaluation licenses.
Examples may simplify production settings for educational clarity. Review, adapt, and thoroughly validate security rules, zones, and password policies before applying commands or files in production networks.