Security and vulnerability disclosure

We take the security of our products and our customers' data seriously. If you believe you have found a security vulnerability in a Zhon1 Tech website or product, please tell us.

How to report

Email support@zhon1tech.com with "Security" in the subject. Please include:

• what you found and where (the page, URL or feature);
• the steps to reproduce it;
• the impact you think it has.

We will acknowledge your report within 3 business days, keep you updated, and let you know when it is fixed.

Please

• Act in good faith and only test against accounts you own or have permission to use.
• Do not access, change or delete other people's data. If you come across it, stop and tell us.
• Do not run denial-of-service tests, spam, or social-engineering attacks on our staff or customers.
• Give us a reasonable time to fix the issue before telling anyone else.

Our promise

If you follow this policy, we will not take legal action against you for your research, and we will credit you (if you want) once the issue is fixed.

Scope

zhon1tech.com and its subdomains, and the Zhon1 Tech products hosted on them. Third-party services we use (for example Stripe, Supabase or Vercel) have their own disclosure programs.

Our machine-readable contact file is at /.well-known/security.txt.