Legal and privacy
How this website handles your information, and the rules for security testing and disclosure.
Privacy
This is a static website hosted on Cloudflare. When you visit, your browser sends your IP address and request headers to Cloudflare so it can deliver and protect the site.
The site has no analytics, advertising trackers, cookies, forms or file uploads. Fonts, images and video are served from this site, not from third parties. If you pause motion, your browser remembers that choice on your device. It is never sent to us.
Cloudflare handles request data under its own privacy policy.
Email inquiries
Inquiries go to engage@bendings.com. Email is not encrypted.
Keep a first message brief. Leave out credentials, personal records and vulnerability evidence until we agree a secure channel with you.
Website terms
This website describes Bendings and its security services. It is not legal advice, a service agreement or permission to test any system.
We test only with written authorization and an agreed scope that names the permitted targets and activities. Nothing on this website authorizes access to or testing of any system, premises or account.
Responsible disclosure
If you believe you have found a security issue affecting Bendings, email security@bendings.com and ask for a reporting channel. Leave technical details and personal data out of that first message. Our contact details are also published at /.well-known/security.txt.
Do not disclose details publicly. Do not access, change or extract information beyond any authorization you already hold, and do not disrupt services.
We do not run a bug bounty and do not pay for reports.
About the imagery
The paintings on this website were made with AI image tools for Bendings. They do not depict our offices, people, clients or engagements.