Skip to content

■ Security

Security policy.

This site is static — no accounts, no databases, no server code. Hardened with strict security headers, HTTPS everywhere, and a tight content policy.

Report a vulnerability

Email mwmwai@gmail.com or WhatsApp 0741 992 308 with details and reproduction steps. We acknowledge within 48 hours.

Scope

orbitwebdesigns.co.ke and all subdomains. Out of scope: third-party services (Vercel, Google, Meta) and social engineering.

Client data

No client data is stored on this public site. Project credentials live in environment variables only — never in code.