Skip to main content

Vulnerability Disclosure

If you believe you have discovered a security vulnerability in a faktoora service, we ask that you report it to us responsibly.

Reporting​

Please send your report to security@faktoora.com with a description of the issue and how it may be reproduced. Include your contact information so we can follow up.

Guidelines​

  • Do not access, modify, or delete data belonging to other users
  • Do not perform actions that could degrade service availability
  • Do not publicly disclose the issue before we have had a reasonable opportunity to address it
  • Do not use automated scanning tools against our services

Our Response​

  • We will acknowledge your report within 2 business days
  • We will provide an initial assessment within 5 business days
  • We will keep you informed of progress toward resolution
  • We will not take legal action against individuals who report in good faith and follow these guidelines

Contact​

Email: security@faktoora.com