Responsible Disclosure
מסמך זה מסופק באנגלית, הגרסה המחייבת. סיכומים מתורגמים עשויים לבוא בהמשך.
We welcome reports from security researchers. If you have found a vulnerability in PALANIT, this policy explains how to report it and what you can expect from us.
Scope
This policy covers PALANIT's own websites, hosted services and open-source projects. Please do not test third-party systems, and do not use PALANIT's tools against targets you are not authorized to test.
How to report
Email [email protected] with a clear description of the issue, the steps to reproduce it, and its potential impact. If the report is sensitive, say so and we will arrange a secure channel. Please give us a reasonable time to fix the issue before disclosing it publicly.
Safe harbor
If you make a good-faith effort to follow this policy, we will not pursue or support legal action against you for your research. Act in good faith, avoid privacy violations and service disruption, and only interact with accounts you own or have permission to access.
What to expect
We will acknowledge your report, keep you informed as we investigate, and credit you (if you wish) once the issue is resolved. As an early-stage, founder-led project we may not yet offer monetary rewards, but we deeply value and will recognize your contribution.