Responsible Disclosure

1. Report Security Issues

Email security reports to support@vettarasearch.com. Include a concise description, affected URL or endpoint, reproduction steps, impact, and any safe proof of concept.

2. Safe Research Rules

• Do not access, modify, delete, export, or share data that is not yours.
• Do not perform denial-of-service, spam, social engineering, malware, or physical attacks.
• Do not test third-party providers or customer systems through Vettara without permission.
• Stop testing and report promptly if you encounter sensitive data.

3. Response

We aim to acknowledge well-formed vulnerability reports within 48 hours and will work to remediate confirmed issues based on severity and risk.