How to report
Email [email protected] with a description of the issue, the affected URL or system, steps to reproduce and the potential impact. Our machine-readable contact details are published insecurity.txt.
Scope
- In scope: cyveraqis.com and its subdomains operated by Cyveraqis.
- Out of scope: third-party services (for example, Cloudflare or our email provider), which have their own programs.
Please
- Do not access, modify or delete data that is not yours, and stop once you have demonstrated the issue.
- Do not run denial-of-service, spam or social-engineering tests, or test physical security.
- Give us reasonable time to fix the issue before any public disclosure.
Our commitment
- We will acknowledge your report within three business days.
- We will keep you informed and credit you, if you wish, once the issue is fixed.
- We will not pursue legal action against good-faith research that follows this policy.
We do not currently offer monetary rewards.