Security and responsible disclosure
Last updated: To be added
1. How to report
If you think you have found a security issue in this website or the Can-e-Buy platform, please tell us privately. Send your report to our security contact below. Please do not share the issue in public until we have had time to fix it.
Full legal text to be supplied by counsel.
2. What to include
A clear report helps us act faster. Please include:
- The page, system or feature affected.
- What the issue is and what someone could do with it.
- Steps to reproduce it, with screenshots if you have them.
- How we can reach you with questions.
Please do not access, change or delete data that is not yours. Stop testing once you have shown the issue exists.
3. What we promise
We will read every report and confirm we have received it. We will keep you updated while we look into it and let you know when it is fixed. If you wish, we will thank you by name. Target response times are to be added.
Full legal text to be supplied by counsel.
4. Safe harbor
We want people who report issues in good faith to feel safe doing so. The exact terms of our safe harbor are to be confirmed by counsel.
Full legal text to be supplied by counsel.
5. Contact
Security contact: contact@canebuy.com. Our security.txt file lists the same details.