Responsible disclosure
Last updated:
If you found a security vulnerability in the Mimir app or on this website, write to us; we will read it and get back to you.
How to report
Send your finding by email to hello@naughtydevelopment.com. Writing “Security” in the subject line is enough.
What to include
Include the affected address or product version, what the problem is, the steps for us to reproduce it and any evidence (a screenshot, a sample request).
If you also write your own assessment of what the problem could lead to, it helps us prioritise.
What we ask of you
Do not access, copy or change other people's data; use only the minimum access needed to show the problem.
Avoid tests that would disrupt the service (heavy load, denial of service), and do not share the problem with others until we have fixed it.
What we will do
We confirm that we received your report, tell you how the assessment is going and let you know when a fix is released.
We have no bug bounty program and do not promise rewards. Thank you for your contribution.
Language
This is an English translation of the Turkish text. If the two differ, the Turkish text prevails.