Safe harbor
Good-faith research consistent with this policy will not trigger legal action solely for actions necessary to demonstrate a vulnerability safely.
Tihaya Set · Privacy and security
Responsible Disclosure
Good-faith security research is welcome. We work with researchers to protect users and resolve confirmed issues responsibly.
In scope
Officially published Tihaya Set applications and project-controlled services explicitly designated for security research.
Research boundaries
Do not disrupt services, access another person's data, use social engineering, deploy malware or retain unauthorized access.
Response targets
We aim to acknowledge reports within three business days, provide an initial assessment within seven business days and coordinate responsible disclosure.
Contact
https://subdus.ru/responsible-disclosure.html
Our machine-readable reporting policy is available at /.well-known/security.txt.
Private because you pay us. Not because somebody pays for you.