Report a security vulnerability

Please report suspected security vulnerabilities confidentially to support@vantero.chat with the subject Security vulnerability report. Please do not publish unresolved details before coordinated disclosure.

Where possible, include the affected URL, component, app version or API route, a concise description and potential impact, reproducible steps or a minimal proof of concept, relevant timestamps and sanitized logs, and a safe way to contact you for follow-up questions.

Do not send personal data, customer content, passwords, access tokens or other production secrets. Do not access, change or retain data that does not belong to you. Stop testing if availability, third-party data or production operation could be affected and contact us first. These guidelines do not grant permission for unlawful or disruptive testing.

We acknowledge and prioritize incoming reports through the contact above, coordinate any necessary follow-up, remediation and appropriate disclosure, and notify affected parties or authorities where required by law. The same contact can be used for urgent privacy or security incidents with a clear subject line.