Responsible disclosure
We welcome responsible reports. Unauthorized testing is not permitted.
This is a static site with no accounts, no checkout and no stored customer data. If you find a vulnerability, email security@hackit.lol with the steps to reproduce it. Please don't run destructive tests, denial-of-service, or social engineering against us or anyone connected to this site.
We'll acknowledge reports and fix confirmed issues. We don't run a cash bounty.