Security Policy

1. How to report

Send vulnerability reports to [email protected]. Include a clear description, steps to reproduce, affected URLs or components, and the impact you believe the issue has. If you have a proof of concept, include it in your first message or offer to provide it on request.

Machine-readable contact details are also published at /.well-known/security.txt.

2. Scope

This policy covers security issues in Huntertech.io web applications, APIs, and infrastructure that we operate under the huntertech.io domain.

Out of scope: social engineering, physical attacks, denial-of-service tests, spam or abuse of third-party services, issues in vendor products we merely link to or aggregate, and findings that require physical access to a user device.

3. Safe harbor

If you make a good-faith effort to follow this policy, avoid privacy violations and service disruption, and give us reasonable time to remediate before public disclosure, we will not pursue legal action related to your research. We cannot authorize activity that violates applicable law.

4. What to expect

We aim to acknowledge reports within a few business days and will keep you informed as we investigate. We may ask clarifying questions. We do not currently offer a paid bug bounty program; recognition is at our discretion for valid reports that help us improve security.