security posture
We teach defense.
We practice it here.
Everything below describes how this platform actually works today — not what we hope to do later.
Every page, sign-in and file transfer runs over HTTPS with strict transport security.
What we hold vs.
what shows
you give us
- Your name
- City / ZIP
- Email address
- Coursework progress
- Uploaded credential files
the public sees
- Your name
- City and state
- Certificate ID
- Bio and skills you wrote
- Credentials you chose to publish
…and only after you submit it and the admin approves it.
Your exact ZIP is never published. The national density map shows city-level clusters and counts, never individual members or addresses.
The credential vault
Private by default
Uploaded files have no public address. There is no folder to browse and no link to guess.
Two people only
You and the site admin. Other members cannot reach your files, even signed in.
Links that die
Viewing generates a temporary link that stops working minutes later.
Verify an operator
Enter a certificate ID. One exact match, or nothing.
Verification answers one exact ID at a time and returns a single approved record. There is no endpoint that lists our members, and unapproved certificates return nothing at all.
Found something? Tell us.
If you believe you have found a vulnerability in this site, report it privately before disclosing it anywhere else. We read every report and will respond.
jeremy.konecny@gmail.comPlease do not run automated scans or attempt to access other members' data while testing.
independent platform evidence
This site is built and hosted on Lovable, which publishes its own automatically generated trust report for this deployment. It is produced by the platform, not by us.
View platform trust reportWhat we don't claim
We hold no SOC 2, ISO 27001, PCI or HIPAA certification, and we have not completed a third-party penetration test. If we ever do, it will be listed here with a date.
Our coursework is educational. Completing it certifies that training was finished and reviewed — it is not a warranty that any home or business is unbreakable.
No platform is immune. Security is a practice we keep working at, and we would rather tell you that plainly than sell you a badge.