Security Policy

Potential security issues affecting VKARE-managed systems may be reported to security@vkare.co.

Safe reporting

Include the affected asset, reproducible steps, observed impact, and minimal supporting evidence. Avoid accessing, modifying, downloading, or retaining data that does not belong to you.

Prohibited activity

Do not perform denial-of-service testing, social engineering, destructive testing, persistence, or testing of third-party systems without explicit authorization.

Good faith

This policy is not a bug bounty promise and does not provide blanket authorization. VKARE appreciates responsible, proportionate reporting.