// SECURITY
Responsible disclosure
Found something in vulnera.om, labs.vulnera.om or our tools? Tell us. We fix fast and we say thank you in public.
Scope
- vulnera.om, labs.vulnera.om, media.vulnera.om, API endpoints under /api/v1
- Out of scope: competition challenge targets (they are meant to be broken), third-party services, social engineering of staff
Safe harbour
Good-faith research within this scope will not lead to legal action. Don't access data that isn't yours, don't degrade service, don't pivot.
Response
We aim to acknowledge a report within 5 business days and to send a status update at least every 10 business days until it is fixed. Credit on this page when fixed (opt-out available).
CONTACT
- security@vulnera.om
- security.txt
- /.well-known/security.txt
- Preferred language
- English