Security
Hecttor bug bounty program
Help us keep Hecttor secure.
Security is core to Hecttor. We welcome responsible vulnerability research that helps us identify and resolve issues across our website, applications, SDKs, and related services.
Responsible Research
When testing Hecttor, please:
- Avoid accessing, modifying, or deleting data that does not belong to you
- Do not disrupt or degrade our services
- Do not use social engineering, phishing, or physical attacks
- Do not target Hecttor employees, customers, partners, or infrastructure outside the authorized scope
- Stop testing immediately if you encounter personal, confidential, or sensitive information
- Give us reasonable time to investigate and remediate an issue before disclosure
What to Include
A good report should include:
- A clear description of the vulnerability
- The affected URL, product, or component
- Steps to reproduce the issue
- Supporting screenshots, logs, or proof of concept where relevant
- Your contact information
The more detail you provide, the faster we can investigate.
Rewards
Hecttor may provide monetary or other rewards for eligible reports. Reward eligibility and amount are determined by Saima Inc. based on factors including:
- Severity and impact
- Quality of the report
- Reproducibility
- Whether the issue has already been reported
- Compliance with this policy
Rewards are offered at our discretion and are not guaranteed.
Safe Harbor
If you conduct security research in good faith and follow this policy, Saima Inc. will not pursue legal action against you for your research.
If a third party initiates legal action related to research conducted in accordance with this policy, we will make reasonable efforts to clarify that your research was performed under our responsible disclosure program.
Send us your report
We aim to acknowledge valid submissions promptly and will work with you to investigate and resolve confirmed issues.
Please send vulnerability reports to: [email protected]
Include “Security Vulnerability Report” in the subject line.