Security

Report a security issue

If you think you have found a security problem in inetro.net or one of the Inetro apps, please tell us. We read every report and we'd rather hear about a problem from you than from anyone else.

How to report

Email info@inetro.net with “Security” in the subject. Please include:

• what you found, and which page, app or address it affects;
• the steps to reproduce it, and what you expected to happen instead;
• how we can reach you with questions.

Our contact details for security reports are also published in security.txt.

What we ask of you

• Only test against your own account and your own data. Don't access, change or delete anything that isn't yours; if you reach someone else's data by accident, stop and tell us.
• Don't disrupt the service: no denial-of-service, load or spam testing.
• Don't try to trick our staff or customers, and don't test our offices or equipment physically.
• Give us a reasonable amount of time to fix the problem before you tell anyone else about it.

What we'll do

• Reply to confirm we have your report.
• Look into it, and keep you informed while we do.
• Let you know when it has been fixed.

We don't run a paid bug bounty programme.