Security & Responsible Disclosure

We take the security of our systems seriously and welcome reports from the security-research community. This page is the disclosure policy referenced by our security.txt.

Reporting a vulnerability

Email security@nazemoffplatforms.com with a clear description, the steps to reproduce, and the potential impact. Please give us a reasonable opportunity to investigate and remediate before any public disclosure.

Guidelines

• Make a good-faith effort to avoid privacy violations, data destruction, and service disruption.
• Only test against accounts and data you own or are explicitly authorized to use.
• Do not run automated scanning that degrades service, and do not exfiltrate data.
• Do not access, modify, or delete data that does not belong to you.

Safe harbor

We will not pursue legal action against researchers who act in good faith and in accordance with this policy. If in doubt about whether an action is authorized, contact us first.

Scope

This policy covers nazemoffplatforms.com and its subdomains. Third-party services we rely on (for example, our hosting and email providers) are governed by their own disclosure programs.