Found a security problem? Email security@asizor.com. We aim to acknowledge vulnerability reports within 3 business days. Research done in good faith is welcome.
1. Scope
Our website (asizor.com) and the services at app.asizor.com, api.asizor.com and admin.asizor.com. Third-party services we use are covered by their own programs.
2. How to report
Email security@asizor.com. Our machine-readable contact details are at /.well-known/security.txt.
3. What to include
- What you found and where (URL, endpoint or feature).
- Steps to reproduce, and the impact you believe it has.
- Any proof-of-concept, and how we can reach you.
4. What to expect
We aim to acknowledge vulnerability reports within 3 business days. This is a target, not a service-level commitment. We do not run a bug bounty program.
5. Safe harbour
If you act in good faith, we will not pursue legal action over your research. In good faith means: you test only your own accounts, you stop once you have shown the issue and do not copy, modify or keep other people’s data, you do not degrade the service (no denial-of-service testing), you do not use social engineering or physical attacks, and you give us reasonable time to fix the issue before telling anyone else.