Security & Responsible Disclosure

Reporting a concern

Send suspected security issues to [email protected] with “Security report” in the subject. Include the affected URL, a concise description, safe reproduction steps and any relevant timestamp. Do not include passwords, private customer records or destructive proof.

Good-faith testing

• Avoid accessing, changing, downloading or deleting data that does not belong to you.
• Do not disrupt availability, overwhelm services, send spam or use destructive automated testing.
• Do not attempt social engineering, credential attacks or physical intrusion.
• Allow reasonable time for investigation before publishing technical details.

What happens next

We will acknowledge useful reports when contact information is provided, assess the issue, prioritize remediation according to impact and share an update when practical. This page does not create a paid bug-bounty programme or guarantee compensation.

Protected areas

Administration, CRM, ERP, project, client and support portals are private operational systems. They are excluded from public sitemaps and should only be accessed by authorized users.