When we find an insecurity we'll tell you directly.
No published vulnerability list - ever.

The Notification Process

Once we identify a insecure website a RescueTheWeb incident report will be written and sent to the website owner. We will try contacting the website owner and administrator through email, phone, and postal mail.

Insecurity Categories.

Each insecure website is categorized into one of four levels of concern. The levels are defined below.
  1. Your website has been compromised.
    This level of concern indicates that RescueTheWeb has confirmed some infection on your website. This usually involves identifying some infection signature while looking at web spidering data.
  2. Your website can probably be compromised.
    This level of concern indicates that RescueTheWeb has seen that your website is either 1.) utilizing software components that have widely known security vulnerabilities or 2.) unintentionally displaying private webpages.
  3. Your website is leaking confidential information.
    This level of concern indicates that RescueTheWeb has seen confidential information on your public facing webpages. Concerns within this category include leaked social security numbers, credit card numbers and account information (credentials).
  4. Your website is not obviously insecure.
    This level indicates that RescueTheWeb sees no issue with your website. This does not mean that your website is secure. This level just means that there are no obvious issues with your website. To fully evaluate your websites security please work with a trusted security consultant.