Website security

The form uses Cloudflare Turnstile for anti-bot verification. The server checks fields and verifies the result before attempting message delivery. Additional protections limit repeated attempts and certain automated submissions.

Delivery errors are shown in the interface. A confirmation is neither acceptance of an engagement nor proof that AGR has read the message.

The server delivers requests to AGR’s email system through Microsoft Graph. Credentials for this delivery remain server-side. Submitted messages are escaped before being inserted into the email.

The site provides no secure client-document repository. Use the form for initial general context and agree on an appropriate channel for sensitive documents.

The production configuration restricts permitted script and connection sources and prevents the website from being embedded in an external frame. Fonts are hosted with the site.

These measures reduce certain attack surfaces. They do not guarantee the absence of incidents and do not certify the infrastructure or providers.

Email AGR with the page address, reproduction steps and observed effects. Avoid personal information and secrets in your report. Do not continue testing if it exposes data or disrupts the service.

This page grants neither a reward program nor general authorization for intrusive testing.