Private, independent site — not affiliated with any government agency, the IRS, SSA, DOL, or CRA.workmoneytax.com is a private, independent website. It is NOT affiliated with, endorsed by, or connected to any government agency, including the IRS, SSA, U.S. Department of Labor, any state workforce or revenue agency, or the CRA. For official determinations, use the official agency links provided on each page.

Security

Our security posture

The best defense for a money site is having nothing worth stealing. Work Money Tax is a pre-rendered static site: there is no account system, no login, no database of users, and no server-side storage of anything you type. Your wages, tax figures, and household payroll details are processed entirely in your browser and never leave your device.

All pages served over HTTPS with HSTS
Strict Content Security Policy and modern security headers (X-Content-Type-Options, Referrer-Policy, Permissions-Policy)
Client-only architecture — calculator inputs are never transmitted or stored server-side
No authentication surface: no passwords, no sessions, no credentials to breach
Static hosting on a hardened CDN edge; no origin server to attack
Regular dependency updates and lockfile auditing

Our security headers target grade A on securityheaders.com.

Responsible disclosure

If you discover a security vulnerability, please disclose it responsibly. Email support.cosyslabs@gmail.com with the subject “Security Vulnerability” and enough detail to reproduce the issue. We will acknowledge within 72 hours and keep you informed as we fix it. Please do not test against real users or publicly disclose before we have had a reasonable chance to remediate.

Machine-readable contact details: /.well-known/security.txt