Security policy

Reporting a vulnerability

If you believe you have found a security issue in RatiRose Technologies’s website or in software we operate, please email ratiandrose@gmail.com with a description, the affected URL and steps to reproduce.

Please

• Give us reasonable time to investigate and fix the issue before sharing it publicly.
• Do not access, change or delete data that is not yours, and stop as soon as you confirm a problem.
• Do not run denial-of-service tests, spam our forms, or use automated scanners that degrade the service.
• Do not use social engineering or physical attacks.

What we do

• Acknowledge your report and keep you informed while we investigate.
• Fix confirmed issues as quickly as we can, prioritised by risk.
• Credit you, if you wish, once the issue is resolved.

Machine-readable contact details are published in /.well-known/security.txt.