Website Security

Last updated: July 2026

Keystone Building Supply LLC takes the security of this website and of the information you share with us seriously. This page explains, in general terms, the safeguards we use and how to report a concern responsibly. No website can be made completely immune to attack, but we apply reasonable, layered protections.

How we protect this website

• Encrypted connections: the production website is served over HTTPS.
• Protected forms: our Contact and Quote forms use anti-forgery tokens and spam protection.
• Rate limiting: we limit repeated automated submissions to reduce abuse.
• Secure email handling: enquiry emails are sent over an authenticated, encrypted connection, and we avoid storing unnecessary personal information.
• Hardened configuration: we apply modern security headers and safe defaults.

Reporting a suspected vulnerability

If you believe you have found a security vulnerability in this website, we welcome a responsible, private report. Please email support@keystonebuildingsupply.com and include:

• A clear description of the issue and where you found it.
• The steps needed to reproduce it.
• Any relevant page addresses (URLs) and the date and time you observed it.

Please give us a reasonable opportunity to review and address the issue before disclosing it publicly.

Please do not

• Access, modify, delete, or download data that is not your own.
• Disrupt, degrade, or overload the website or its services.
• Run automated scanning that harms availability, or attempt social-engineering, phishing, or physical attacks.

Acting in good faith and within these guidelines helps us keep customer and company information safe. This page is a responsible-disclosure request; it is not a formal bug-bounty program and does not offer a reward.

Contact

Security reports and questions: support@keystonebuildingsupply.com. For general enquiries, please use our Contact page.