Security and confidential information.
What to send in an inquiry and how access to private systems is agreed.
Keep an initial inquiry limited
Use the first message to describe the problem, the applications involved and the type of work you are considering. Do not include passwords, secret keys, unrestricted database exports, private customer records or other material that does not belong in ordinary business correspondence.
If context requires an example, remove identifying details and confirm that you are entitled to share it. We can discuss a more appropriate transfer method when the engagement and the need for the information are understood.
Agree access before the work
Access to a business system should have a clear purpose, an authorized owner and the permissions needed for the agreed task. Where possible, use named accounts, limited permissions, representative test data and a defined way to end access.
Confidentiality, data processing, retention, permitted environments and incident responsibilities should be documented for the particular engagement. This website does not establish those terms or certify that a specific system meets a security standard.
Website protection
This website uses HTTPS. Ordinary email is not an appropriate way to transfer passwords, unrestricted system access or sensitive project records.
Raise a concern
To report a suspected website security issue, email admin@resolveops.org with the affected page or function and a concise description. Please avoid destructive testing, accessing other people's information or sending sensitive proof material in an initial email.
Describe what happened and how to reproduce it safely. We may need to arrange another channel for private technical details.