1. Scope & good-faith safe harbor
Testing must not harm customers or data. Don't access data that isn't yours, degrade service, run destructive or volumetric (DoS) tests, or socially engineer staff or customers. Good-faith research under this policy won't be pursued by us.
-
In scope: our websites, control panel, APIs, and the hosting infrastructure we operate.
-
Out of scope: customer-owned content and sites; third-party services.
2. What to expect
We acknowledge reports, investigate, and keep you updated. Please give us reasonable time to fix issues before public disclosure.