1. Scope
This policy applies to all systems and services operated by Shinydex, including:
- shinydex.com
- Associated services, APIs, and infrastructure
2. How to Report
If you believe you've discovered a security vulnerability, please contact us at:
security@shinydex.comInclude as much information as possible, such as:
- Detailed description of the issue
- Steps to reproduce the vulnerability
- Potential impact or affected components
- Screenshots, logs, or proof-of-concept (if applicable)
3. What to Expect
- Acknowledgment within 5 business days
- Status update within 10 business days
- Swift resolution of validated issues
- Notification when the issue is fixed
4. Research Guidelines
Please follow these rules when testing:
- Do not access, modify, or delete other users' data
- No denial-of-service or brute-force attacks
- No phishing, social engineering, or physical intrusion
- Use responsible testing practices
5. Out of Scope
The following are typically considered out of scope:
- Clickjacking on non-sensitive pages
- Missing security headers without impact
- Outdated components without proven exploitability
- Rate-limiting or CAPTCHA bypass without real-world risk
6. Safe Harbor
If you follow this policy in good faith, Shinydex will not take legal action against you. Activities conducted under this policy will be considered authorized if:
- Your testing is in-scope and non-disruptive
- You report vulnerabilities responsibly
- You avoid data theft or service disruption
7. Policy Updates
We may update this policy periodically. Please check back to stay informed of any changes.