Responsible disclosure

We take the security of Mandistry seriously. If you find a vulnerability, we'd like to hear about it so we can fix it before it can be misused.

How to report

• Mail your findings to [security@yourdomain.nl].
• Include enough detail to reproduce the issue, and your contact details.
• Report as soon as possible after discovery.

Please don't

• Access, change or delete data that isn't yours, or more data than needed to show the issue.
• Use social engineering, physical attacks, spam or denial-of-service.
• Share the vulnerability with others until it has been fixed.
• Install malware or backdoors, or use brute force.

What we do

• We respond within 3 working days with our assessment and an expected fix date.
• We keep you informed and handle your report confidentially.
• If you follow these rules, we will not take legal action against you for the report.
• With your permission, we credit you once the issue is fixed. We may offer a reward, depending on severity.