First Contact is a rapidly growing organization dedicated to tracking, documenting, and validating reports of Unidentified Flying Objects (UFOs) from around the world. Their public website serves as the primary platform for members of the public to submit sightings, upload photographs and videos, access research articles, and browse an extensive archive of verified and unverified reports. As media attention surrounding unexplained aerial phenomena has increased, the website has experienced a significant rise in traffic and now stores a growing volume of potentially sensitive user information. Concerned about the security of their online presence and the possibility of cyberattacks targeting their systems, First Contact has engaged our penetration testing firm to conduct a comprehensive security assessment of their publicly accessible website.