Responsible disclosure

We welcome reports from security researchers. If you believe you have found a vulnerability in one of our systems, please tell us so we can fix it.

How to report

Email security@techeyes.ly with a description of the issue, the affected URL or system, steps to reproduce and any proof of concept. Reports in Arabic or English are welcome. Our contact details are also published in /.well-known/security.txt.

In scope

• techeyes.ly and its subdomains
• [CONFIRM: other systems you want reported]

Please don’t

• Access, change or delete data that isn’t yours, beyond the minimum needed to show the issue.
• Run denial-of-service tests, spam, or social-engineering attacks against our staff.
• Use automated scanners that generate heavy traffic.
• Publicly disclose the issue before we have had a reasonable time to fix it.

What we commit to

• Acknowledge your report within [CONFIRM: e.g. 3 working days].
• Keep you informed as we investigate and fix it.
• Not pursue legal action against good-faith research that follows this policy. [CONFIRM: legal wording]
• Credit you publicly, if you wish, once the issue is resolved.

We do not currently offer financial rewards for reports.