Vulnerability Disclosure Policy

We welcome responsible vulnerability reports. This page describes scope, reporting process, safe harbor, and response SLOs.

Scope

Web / API and official applications under the mintor.dev domain.

How to Report

Contact: Contact Us
Please provide reproduction steps, impact assessment, attack scenario, screenshots / PoC where possible.

Safe Harbor

We will not pursue legal action against good-faith research that does not involve excessive load or harm to users. Viewing, modifying, or destroying data is prohibited.

Response SLOs

Acknowledgement: within 3 business days
Initial triage: within 7 business days
Fix / disclosure: prioritized by severity