Vulnerability disclosure
Report
Send details to securitykernoops.com: affected product or service, version, steps to reproduce, impact. English or Polish.
What to expect
- Acknowledgement within 3 business days.
- Initial assessment within 30 days.
- Fix or mitigation, and coordinated public disclosure, within 90 days.
Scope
Test only devices, installations and accounts you own or are explicitly authorised to test. Do not access other customers' data or equipment; stop and report as soon as you see it is possible.
Safe harbour
We will not pursue legal action for good-faith research that avoids privacy violations, data destruction and service disruption, and that gives us reasonable time to fix the issue before disclosure.