We welcome reports from researchers who help us keep this site secure.

Reporting a vulnerability
If you believe you have found a security vulnerability in zafanibaixa.org, please write to security@zafanibaixa.org with a description of the issue, the steps to reproduce it and any supporting evidence.

Our commitment
We will acknowledge your report within five business days, keep you informed as we investigate and, if you wish, credit you once the issue is resolved.

Good faith
We will not pursue action against researchers who act in good faith: who avoid privacy violations and service disruption, do not access or modify data beyond what is necessary to demonstrate the issue, and allow us reasonable time to respond before any disclosure.

Scope
This policy covers zafanibaixa.org and its subdomains. We do not currently offer monetary rewards.
Our security.txt is published at /.well-known/security.txt.