Responsible Disclosure

1. Reporting a suspected issue

Send a clear description of the suspected vulnerability to security@inyanzasystems.com.

2. Information to include

• The affected website, endpoint, or service.
• Steps needed to reproduce the issue.
• The potential security impact.
• Relevant screenshots or technical details.
• Your preferred contact information.

3. Responsible testing rules

• Use only accounts and data you are authorized to access.
• Do not access, download, modify, or delete customer data.
• Do not disrupt service availability or infrastructure.
• Do not use malware, social engineering, or physical attacks.
• Stop testing when sensitive information becomes visible.

4. Public disclosure

Please allow Inyanza Systems reasonable time to investigate and address a reported issue before publishing technical details.

5. Current program status

Inyanza Systems does not currently operate a paid bug-bounty program. Submission of a report does not guarantee payment, reward, recognition, or other compensation.

6. Good-faith reporting

Good-faith research performed within these guidelines will be reviewed responsibly. Testing outside these boundaries may be restricted or reported when necessary to protect users.