Annual Cybersecurity Disclosure 2026
| Item | Detail |
|---|---|
| Organization | Prosperity Club (Deborah Armstrong, licensed insurance agent) |
| Reporting period | November 1, 2025 to October 31, 2026 |
| Published | November 3, 2026 |
| Valid until | November 3, 2027, or until replaced by the next disclosure |
| Edition | First annual disclosure |
| Approved by | Deborah Armstrong, owner |
| Security contact | security@plausiden.com |
1. Purpose and status
This disclosure describes how Prosperity Club manages cybersecurity risk, who is responsible for it, what changed during the reporting period, and whether any incidents occurred. We publish it ourselves; it has not been audited by a third party. Prosperity Club does not hold an ISO/IEC 27001 certificate or a SOC 2 report, and does not operate a paid bug bounty program.
2. About Prosperity Club
Prosperity Club is an insurance agency offering life, health, property & casualty, and cyber insurance, legal protection plans, and free financial education. prosperityclub.com has been our website since 2016.
3. Scope
In scope: the prosperityclub.com website and the server it runs on, which is operated for us by our technology partner, PlausiDen.
Out of scope: services run by other companies: Google Analytics, which counts visits to the site, and our email service, which is hosted by a separate provider.
4. Governance
Accountability. Deborah Armstrong, as owner, is accountable for cybersecurity risk at Prosperity Club and approves this disclosure each year.
Operations. PlausiDen builds and runs our website and the server behind it. PlausiDen’s lead engineer, William Armstrong, manages the technical controls day to day. PlausiDen’s own disclosure covers that server in more detail: PlausiDen Annual Cybersecurity Disclosure 2026.
5. Information we handle
On the website. The site has no accounts, logins, payments or forms. Visitors reach us by phone, text or email.
Needs analysis. The free needs analysis runs entirely in the visitor’s browser. Answers are never sent to us or to anyone else, and an automated test confirms this on every release.
Visit statistics. Google Analytics counts visits, as set out in our Privacy Policy. Its advertising features are turned off, and visitors can switch analytics off from the footer of any page.
What clients tell us by phone or email is used only to serve them. It is never sold or shared for marketing.
6. Controls
These controls are operated for us by PlausiDen:
Encryption in transit. The site is served over TLS 1.2 and 1.3 only. Browsers are told to use HTTPS for two years (HSTS, with preload), and security headers restrict what a page may load and where it may be embedded.
Hosting. The site runs on a dedicated server leased from Hetzner Online GmbH and administered only by PlausiDen. Its disks are encrypted at rest.
Administration. Server access requires an SSH key; password logins and direct root logins are disabled. A host firewall, automatic blocking of abusive traffic (CrowdSec) and network intrusion detection (Suricata) protect the server.
Patching. Operating-system security updates install automatically.
Release checks. Every change to the website runs through automated tests before it goes live, covering security headers, links, accessibility, and the needs analysis’s promise to send nothing.
Backups. The server is backed up daily, and an automatic job verifies that the backups can be read.
7. Reporting a security problem
Report security problems with prosperityclub.com to security@plausiden.com. Every report is read; confirmed problems are fixed, and the reporter is told what was found.
8. Incidents
Prosperity Club’s website and the server it runs on were not compromised during the reporting period, and we know of no unauthorized access to information about our clients.
Attacks were attempted and stopped. The server recorded repeated scans from Mirai-variant botnets between September 10 and October 27, 2026, none of which gained access, and automatically blocks addresses known for web scanning, SSH brute-forcing and spam. Details are in PlausiDen’s disclosure.
9. History
| Date | Change |
|---|---|
| May 20, 2016 | prosperityclub.com registered. |
| Jul 2, 2026 | Work begins on a rebuilt website, replacing the previous WordPress site. |
| Aug 2026 | The rebuilt site goes live on PlausiDen’s server. |
| Aug 19, 2026 | Google Analytics added with its advertising features turned off; Privacy Policy updated. |
| Sep 28, 2026 | Automated release test added to prove the needs analysis sends no answers and makes no advertising requests. |
| Nov 3, 2026 | This disclosure published. |
Not sure what you need?
No pressure, no obligation, just a straight conversation about where you stand and what your options are.