Security
Last updated:
This website
Static pages served over HTTPS only, with a strict Content-Security-Policy, HSTS and no third-party scripts, cookies or analytics.
Reporting a vulnerability
Please report security issues to security@hairdraw.app. See /.well-known/security.txt. Please do not access patient data or disrupt the service while testing.