Public
Readable by non-specialists who encounter the lab through research references, tools, or publication records.
About
Focused security work.
PunchCard Labs separates public context, formal records, and controlled collaboration. The root site explains the public surface; documentation and portals carry the deeper work.
- Public Site
- pclsecurity.com
- Documentation
- docs.pclsecurity.com
- Tools API
- tools.pclsecurity.com
- Processing
- Local browser tools
Operating Model
Public material is limited to information that can be read, cited, and reviewed without exposing private evidence or controlled workflows.
Surface Split
The root domain is the public front door. The docs subdomain holds formal records. The tools API is reserved for release metadata and controlled tooling distribution.
Documented
Formal material is versioned and maintained on the docs subdomain.
Tool-Aware
Browser tools are treated as software surfaces with clear data-handling boundaries.
Disclosure-Safe
Public coordination language stays separate from private triage, evidence review, and release approval.