Contact

Email, and only email. No contact form, no chat widget, no calendar-booking funnel.

General and new work

helloREMOVE@handsonzero.com

A couple of sentences about the system and what's worrying you is plenty for a first message. You'll get a reply within two working days, written by me.

Before you write: what engagements look like.

Reporting a security issue

securityREMOVE@handsonzero.com

A real, monitored mailbox, published in security.txt per RFC 9116. The disclosure policy sets out what I commit to and what I ask of you.

Found something in a client's system? Report it to that client directly. I can't act on their behalf.

Encrypted mail

No PGP key is published yet, so security.txt carries no Encryption: field. Need an encrypted channel before then? Say so in a first message and we'll arrange one.

Where this lands

Mail to @handsonzero.com and @handsonzero.nl reaches the same mailbox. Both domains publish SPF, DKIM and DMARC at p=reject with strict alignment, so anything claiming to be from me that doesn't authenticate should be rejected. Worth knowing if you ever receive an invoice with my name on it.