Responsible Disclosure

If you believe you have discovered a security vulnerability affecting Estivador, please report it to security [at] estivador [dot] io .

Please include

• A clear description of the issue
• The affected URL or component
• Reproduction steps or a proof of concept
• The potential impact
• A safe way to contact you

Please do not

• Access, modify, or delete data belonging to other people
• Perform denial-of-service testing
• Use social engineering, phishing, or physical attacks
• Introduce malware or persistence
• Publicly disclose the issue before there has been a reasonable opportunity to investigate and remediate it

Good-faith research

NETERO OÜ will make a reasonable effort to acknowledge a credible report, investigate it, and keep the reporter informed where appropriate. Good-faith research that follows this policy will not intentionally be pursued as malicious activity.

This policy does not create a contractual obligation, reward program, or guarantee of a particular response time.