We collect information you choose to provide, which typically includes your name, email address, telephone number, company name, and anything you write in a message when you contact us through a form, by email, or by phone. We ask that you not send sensitive technical details — credentials, network diagrams, vulnerability details — through an unsecured contact form. We will arrange a secure channel for that.
Like most websites, our web server records standard technical information when you visit, which may include your IP address, browser type and version, operating system, referring page, pages viewed, and the date and time of your visit. This information is used for security monitoring, troubleshooting, and understanding general usage patterns.
This site may use cookies or similar technologies to keep the site functioning correctly and, where applicable, to measure traffic. Most browsers let you refuse or delete cookies through their settings. Disabling cookies may affect how parts of the site behave. If we use a third-party analytics provider, that provider collects usage information under its own privacy policy.
We do not sell your personal information. We do not rent or trade it, and we do not share it with third parties for their own marketing purposes.
We share information only in limited circumstances: with service providers who help us operate our business — such as hosting, email, accounting, and scheduling providers — and only to the extent needed to perform those functions; when required by law, subpoena, or other legal process; to protect our rights, safety, or property, or that of our clients; and in connection with a merger, acquisition, or sale of assets, where the receiving party is bound by terms consistent with this policy.
We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, including access controls, encryption in transit, and multi-factor authentication on business systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.
We keep personal information for as long as needed for the purpose it was collected, and afterward as required to meet legal, tax, accounting, and contractual obligations. Engagement records, including reports and findings, are retained according to the terms of the applicable agreement.
You may ask us to confirm what personal information we hold about you, correct it if it is inaccurate, or delete it where we have no continuing legal or contractual need to retain it. You may also opt out of non-essential email at any time. Depending on where you live, you may have additional rights under applicable privacy law. To make a request, email us at the address below. We may need to verify your identity before responding.
This website is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.
Our site may link to other websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of any site you visit.
We may update this policy from time to time. The effective date at the top of this page shows when it was last revised. Material changes will be posted here, and continued use of the site after that constitutes acceptance.
For privacy questions or requests, contact Flawsbug LLC, North Bethesda, Maryland 20852, or email contact@flawsbug.com.