Security
Keeping SirfBolo secure
SirfBolo uses authenticated account actions, role controls, protected private data flows, HTTPS and server-side checks for sensitive operations. Public browsing does not mean public write access.
Account protection
Sensitive actions require sign-in or another appropriate protected flow. Admin-only actions are restricted to authorised administrative accounts.
Private data
Private contact and protected matrimonial information are not intended to be exposed through public listing responses.
Transport security
SirfBolo is served over HTTPS and uses browser security controls provided by the hosting stack.
Reporting vulnerabilities
If you believe you have found a genuine security issue, email hello@sirfbolo.com with enough detail for us to investigate. Do not exploit the issue, access unrelated user data or publish sensitive information while a report is being reviewed.
Security contact: hello@sirfbolo.com. A machine-readable security contact is also published at /.well-known/security.txt.