Security

engr.tools uses HTTPS for public web traffic and limits backend access to the published API routes. Browser security headers are used to reduce exposure to content injection, framing, MIME confusion, and insecure transport.

Responsible disclosure

To report a suspected vulnerability, send a concise description, affected URL, and reproduction steps to licensing@engr.tools. Do not include secrets or personal data in the first message.

Please avoid disruptive testing, denial-of-service activity, automated high-volume scanning, or accessing information that does not belong to you.

Calculation use

Calculation results should be independently checked before being used for safety-critical, contractual, regulatory, or custody-transfer decisions.