Rampart

== Description ==

A security vendor whose marketing site loads a chat widget, two analytics scripts and a font CDN is making an argument against itself. Rampart makes zero third-party requests, works under a strict Content Security Policy with no unsafe-inline, and self-hosts everything.

Includes patterns for the pages this industry actually needs: a security.txt-backed disclosure page, an advisories archive with severity and CVE fields, and a trust page that links to real artefacts rather than badges.

Advisories carry structured severity and affected-version data, so the archive can be filtered and the feed is machine-readable.

== Screenshots ==

Numbered the way they ship in /assets/. Click any one to see it full width.

01

02

03

04

05

06

== Installation ==

• Install and activate the theme.
• Create your disclosure page from the pattern and publish the matching security.txt.
• File advisories as posts in the Advisories category.

The theme adds no inline styles or scripts, so a strict CSP needs no hashes or nonces for it.

== Frequently asked questions ==

Can I add analytics?

You can. The theme will not stop you and the CSP documentation explains what it costs you.

CVE integration?

Advisories store a CVE identifier and link to the record. There is no automatic import.

== Changelog ==