Reporting a vulnerability

We welcome reports from security researchers. If you believe you have found a vulnerability in a Mirawyn website or system, please tell us so we can fix it.

How to report

Email security@mirawyn.com with the subject “Security report” and include:

• A description of the issue and its potential impact
• Steps to reproduce, including any URLs, requests or proof of concept
• How you would like to be credited, if at all

Our commitment

• We will acknowledge your report promptly and keep you informed of progress
• We will not take legal action against good-faith research that follows this policy
• We will credit you once the issue is resolved, if you wish

Please do not

• Access, modify or delete data that does not belong to you
• Run denial-of-service, spam or social engineering tests
• Publicly disclose the issue before we have had a reasonable chance to fix it

Our machine-readable contact details are published at /.well-known/security.txt.