Legal
Report a vulnerability
If you have found a security problem in Ishtam, we want to hear about it.
How to report
Choose “Report a security problem” on the support form and include:
- What the problem is and what someone could do with it.
- The page or address where it happens.
- The steps to reproduce it.
Do not include other people's personal data in your report. We will reply by email, usually within five working days.
Please do
- Test only with accounts you own.
- Stop as soon as you have shown the problem exists.
- Give us reasonable time to fix it before telling anyone else.
Please do not
- Open, change or delete data that belongs to other members.
- Run attacks that slow down or interrupt the service.
- Send spam, try to trick our members or team, or test physical security.
Our side
If you follow these guidelines and act in good faith, we will not take legal action against you for your research. We will tell you when the problem is fixed. Ishtam does not run a paid bug bounty at present.