Vulnerability Disclosure Policy

If you find a security flaw in Verdin, please tell us. This page tells you how to report it and what we do with your report.

How to report a flaw

Email hello@verdinmapper.com with “Security report” in the subject. Include:

• the page, the route or the feature where you found the flaw;
• the steps that show the flaw;
• what an attacker can do with it;
• how we can contact you.

Rules for testing

• Use only your own account and your own processes.
• Do not read, change or delete the data of another person.
• Do not test with denial of service, spam or social engineering.
• Stop and report when you get access to data that is not yours.
• Give us a reasonable time to fix the flaw before you tell other people.

What we do

• We confirm that we have your report.
• We examine the flaw and tell you what we find.
• We tell you when we fix it.
• If you agree, we give you credit when we publish the fix.

Our contact details are also in security.txt (RFC 9116). See also our Privacy Policy and Terms of Use.