Security & Responsible Disclosure

If you discover any security vulnerability, please report it to us at:

📧 vybex.signal@gmail.com

What to include in your report:

• Description of the vulnerability
• Steps to reproduce
• Screenshots or proof-of-concept (PoC)
• Impact of the issue

We aim to respond within 48–72 hours and resolve issues as quickly as possible.

This policy applies to:

• Vybex website and web applications
• APIs and backend services
• Authentication and user account systems

To ensure responsible disclosure, we ask that you:

• Do not access, modify, or delete user data
• Do not exploit vulnerabilities beyond proof-of-concept
• Do not perform DDoS or brute-force attacks
• Do not disrupt services or harm users
• Respect user privacy at all times

If you follow these guidelines:

• We will acknowledge your report
• We will investigate and fix valid issues promptly
• We will not take legal action for good faith research

We currently do not offer a paid bug bounty program.

However, we truly appreciate responsible disclosures and may acknowledge valid contributions.