POLICY / SECURITY

Report security issues privately.

Please do not disclose a suspected vulnerability publicly before we have had time to investigate and coordinate a fix.

Reporting

Send a clear description, affected page or repository, reproduction steps, and potential impact to [email protected]. Do not include credentials or unrelated personal data.

Safe harbor

Najd Research will not pursue action against good-faith research that avoids privacy violations, service disruption, data destruction, and access beyond what is necessary to demonstrate an issue.

Coordination

Please allow reasonable time to investigate and address a report before public disclosure. We will acknowledge useful reports and coordinate in good faith.