Vulnerability Disclosure Policy

Reporting Security Issues

We take security seriously. If you discover a vulnerability, please report it responsibly to security@shadowlogin.net.

What to Include

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact
  • Your contact information

Bug Bounty Program

We reward responsible disclosure. Bounties range from $50 to $5,000 depending on severity. Critical vulnerabilities affecting customer data are eligible for the highest rewards.

Response Timeline

  • Initial response: 24 hours
  • Severity assessment: 72 hours
  • Fix deployment: 7-30 days depending on complexity