Legal
Who is responsible for security at Apexify Ltd, what that covers, and how to tell me about a vulnerability.
Who is responsible
Security at Apexify Ltd is led by Adrian Majchrzak, Founder, Director & Security Lead. I am accountable for the security of everything Apexify builds and operates, and I am the person who receives and acts on every security report.
What it covers
This site (apexify.uk), the Apexify client portal at portal.apexify.uk, the Playbook and Handover products, and the client websites Apexify builds and maintains.
How I work
Every change is reviewed for security issues before it ships. The sites run on Cloudflare and send strict security headers, and dependencies are kept up to date. A client’s site is only security-tested at that client’s request.
Reporting a vulnerability
Email hello@apexify.uk with “Security” in the subject. Include the affected URL, the steps to reproduce it, and what an attacker could do with it. I will confirm I have it within three working days and keep you updated until it is fixed.
Please test in good faith: only use accounts you own, do not access or change other people’s data, and do not run denial-of-service, spam or social-engineering tests. Give me reasonable time to fix an issue before you disclose it. Apexify does not run a paid bug bounty.
The machine-readable contact is at /.well-known/security.txt.