Security and Vulnerability Reporting
Last updated: August 2026
We take the security of our users' data seriously. If you have identified a security vulnerability, we ask you to report it to us following the rules below.
How to report
Send your findings, together with the steps needed to reproduce the issue, to info@bysirius.com. Where possible, attach a screenshot or a short recording. For machine-readable information, see /.well-known/security.txt.
Rules
- Test only on data belonging to your own account; do not access, modify or delete other users' data.
- Avoid tests that would cause service disruption (DDoS, brute force, spam).
- Do not disclose the vulnerability publicly before reporting it to us and allowing a reasonable time to fix it.
- Do not retain any data you obtain or share it with third parties.
Assessment
We will not take legal action against researchers who act in good faith and follow these rules. This page is not a commitment to a bug bounty program and no specific response or remediation time is guaranteed; we aim to review reports within a reasonable time.