/ Security

How this site is built.

Security is part of how I build software, so it is part of how this portfolio is built too. These are the measures in place — nothing more is claimed.

• 01

  HTTPS & HSTS

  Served over HTTPS with a Strict-Transport-Security header, so browsers refuse to downgrade.

• 02

  Secure headers

  nosniff, frame denial, a strict referrer policy and a permissions policy that disables camera, microphone and location.

• 03

  Minimal data collection

  No contact form, no cookies, no tracking scripts. Nothing to leak.

• 04

  Safe external links

  Every external link opens with rel="noopener noreferrer".

• 05

  Static by default

  Pages are pre-rendered at build time, which keeps the attack surface small.

• 06

  Dependency hygiene

  A small dependency set: Next.js, React, Tailwind CSS and Framer Motion.