Политика ответственного раскрытия

• Only test in-scope systems.
• Do not access, modify or delete data belonging to others; if you access data accidentally, stop and tell us.
• Avoid testing that could disrupt service (DoS, heavy automated scanning).
• Do not share the vulnerability with third parties until it is fixed.
• Do not attempt social engineering, phishing or physical access.

We consider good-faith security research that follows these rules to be authorized and will not initiate legal action because of it. If a third party initiates legal action, we will make it known that the research complied with this policy.

Security reports

[email protected]