Report a security problem

How to report

Write to contact@vedacta.com with the address of the page, the steps that show the problem and what an attacker could do with it. Please keep the details private until it is fixed. We read every report and may write back with questions.

Where this applies

vedacta.com and its subdomains that run our sites and apps. Problems in a service we use, such as Cloudflare, Zoho or Dodo Payments, go to that service.

Please do not

• Open, change, copy or delete data that is not yours. Use your own test account. If you reach someone else’s data, stop and tell us.
• Slow down or flood a site: no denial of service, load tests or high-volume scans.
• Send spam through our forms, or make real payments or refund claims as a test.
• Try to trick people, or try to get into our email or other accounts.
• Ask for payment or threaten to publish in exchange for a report.

No bounties

We do not pay bounties or other rewards for reports, whatever the finding. If you would like public thanks once a problem is fixed, say so in your report.

Good-faith research

If you act in good faith and follow these rules, we will treat your work as help and will not take action against you for it. This is our own commitment only: it cannot speak for anyone else, and it does not cover anything outside these rules.