Application security
Input validation, output encoding, CSRF protection, secure session handling, content security policy and restrictive browser security headers are baseline controls for this site.
Security at AL Group
Security is an engineering requirement.
We build security controls into the way our website, applications and managed services are designed and operated.
Data minimisation
We collect only information needed to respond to enquiries and operate the site. Contact logs avoid storing a raw client IP address.
Operational visibility
Our wider services and products are designed around monitoring, auditability, access control and traceable operational actions.
Responsible disclosure
If you believe you have found a security issue affecting an AL Group service, contact us with enough detail to reproduce and assess the issue without accessing data you do not own.
Report a security issue
[email protected]Use a direct route.
Send a concise description, affected URL/service, reproduction steps and impact. Do not include unnecessary personal data.