Vulnerability Disclosure

If you have discovered a security vulnerability in a faktoora service, we ask you to report it to us responsibly.

Reporting

Please send your report to security@faktoora.com with a description of the issue and how it can be reproduced. Include your contact details so that we can ask follow-up questions.

Guidelines

• Do not access other users' data, and do not modify or delete it
• Do not carry out any actions that could impair the availability of the service
• Do not publish the issue before we have had reasonable time to fix it
• Do not use automated scanning tools against our services

Our Response

• We endeavour to confirm receipt of your report within 2 business days
• We endeavour to provide an initial assessment within 5 business days
• We keep you informed about the progress of the fix
• We will not take legal action against persons who report in good faith and in accordance with these guidelines

Contact

Email: security@faktoora.com