Responsible vulnerability reporting
Help us investigate safely.
Use this address only for a suspected security weakness in an Ekhtarly-owned system. Use Support for ordinary product and account questions.
security@ekhtarly.netA useful security report
- The affected Ekhtarly page or public endpoint
- Minimal reproducible steps
- Expected and observed behavior
- A privacy-safe impact explanation
- Your preferred contact method
Testing boundaries
- Do not disrupt or deny service
- Do not use social engineering
- Do not access credentials or authentication links
- Do not destroy or alter data
- Do not access another user's account or data
Current policy boundary
Ekhtarly does not currently publish a reward, response deadline, confidentiality commitment or legal protection for testing. Do not test third-party systems through this channel.