Report a security issue
If you think you have found a weakness in Sammati, please tell us privately first. We will work with you to fix it.
How to report
Email us with what you found, the steps to reproduce it, and the page or address involved. Please do not include anyone's personal data beyond what is needed to show the problem.
What is in scope
- The Sammati website, customer portal and team console on our own domains.
- The way our website scanner fetches and handles public pages.
What we ask of you
- Do not run tests that slow down or take down the service, and do not send bulk traffic.
- Do not access, change or delete data that is not yours; stop and tell us as soon as you see someone else's data.
- Do not use social engineering, phishing or physical attacks against our team.
- Do not test the third-party services we use; report problems with them to their owners.
- Give us reasonable time to fix the issue before you tell anyone else.
What we promise
- We acknowledge your report within three working days.
- We keep you informed while we fix it and tell you when it is fixed.
- We will not take legal action against research done in good faith that follows these rules.
- With your permission, we will thank you publicly once the issue is fixed.
A machine-readable version of this contact is in security.txt