Security Disclosure
Found something wrong on this site? We would like to hear about it — responsibly.
Placeholder policy. Confirm the disclosure contact and scope with the team before publishing this page.
Our commitment
We appreciate researchers who report vulnerabilities in good faith. If you find a security issue affecting this website or DarkLayer Security services, we will acknowledge your report, investigate promptly and keep you informed — and we will not pursue legal action against research conducted within these guidelines.
Reporting
- Email: afrozkhan6889@gmail.com with subject “Security disclosure”
- Please include steps to reproduce, affected URL and potential impact.
- Allow us a reasonable window to remediate before public disclosure.
Guidelines
- Test against this site and demonstration material only.
- Do not access, modify or delete data that is not yours.
- Do not degrade availability (no DoS, no brute-forcing accounts).
- Do not use social engineering against staff or customers.
- Give us time to fix the issue before publishing details.
Out of scope
- Vulnerabilities in third-party services we merely link to.
- Automated scanner output without demonstrated impact.
- Reports without a reproducible proof of impact.
Recognition
We are glad to acknowledge reporters who help us improve — with your approval of how you would like to be credited. No bounty program is claimed on this page; if one exists, it will be described here explicitly.
Last updated: [DATE — to be set before launch]