OUR SECURITY
We practise what we prescribe.
Our website is small, but we hold it to the same standard as client work. Every result below comes from an independent test you can run yourself. Last checked: 18 October 2026.
Encrypted connection
A+Qualys SSL Labs
Modern TLS 1.3 encryption with a trusted certificate. Browsers are told to use HTTPS only, for a full year (HSTS).
Run the test live →Browser protections
A+SecurityHeaders.com
A strict Content Security Policy, plus protection against clickjacking, content sniffing and cross-site leaks.
Run the test live →Web security baseline
A+Mozilla HTTP Observatory
Score 120 out of 100, with all 12 tests passed.
Run the test live →Email you can trust
PassSPF · DKIM · DMARC
Every email from @stsdataminds.com is digitally signed. Messages that fake our address are sent to junk, not your inbox.
Check our DMARC record →Privacy by default
NoneTracking cookies & analytics
No advertising, analytics or tracking cookies. Enquiries go straight to our mailbox over an encrypted connection and are deleted after 12 months.
Read our Privacy Notice →Small attack surface
By designArchitecture
A static website: no database, no logins and no server code for attackers to target. Each page may only run our own code.
Report a concern →Grades reflect each test's own criteria on the date shown. The live links always show today's result.
RESPONSIBLE DISCLOSURE
Found a security problem?
If you believe you have found a vulnerability in our website or email, please write to business@stsdataminds.com with the subject "Security report". Tell us what you found and how to reproduce it. We read every report, reply as quickly as we can, and will not take action against anyone who reports in good faith and does not access or harm other people's data.
Machine-readable contact details are published at /.well-known/security.txt.