Security
This website is a public portfolio operated by Zachary Bruns. It does not provide user accounts, authentication, payment processing, or intentional collection of personal information through forms.
Security Controls
The site is designed with a limited attack surface and uses controls including HTTPS, security response headers, Content Security Policy, dependency management, secure defaults, and least functionality.
Reporting a Vulnerability
Security issues may be reported privately by email. Please include a description of the issue, reproduction steps, potential impact, and any suggested remediation.
Please avoid publicly disclosing a suspected vulnerability before a reasonable opportunity has been provided to investigate and remediate it.
Scope
In scope:
- The public portfolio website
- Static assets served by the website
- Source code maintained in the associated repository
Out of scope:
- Third-party hosting infrastructure
- Third-party websites linked from this portfolio
- Visitor devices, browsers, or extensions
Last updated: July 31, 2026