If you believe you have found a security problem in anything we run, we want to hear about it. Thank you for taking the time to tell us.
How to report
Write to lior@7it.co.il with "Security" in the subject. Please include what you found, where (the address or the tool), the steps that show it, and what you think someone could do with it. A short report is fine; we will ask if we need more.
Our security.txt has the same contact in the standard format.
What we promise
- We reply within 3 business days to confirm we have your report.
- We keep you updated while we look into it, and tell you when it is fixed.
- If you wish, we thank you by name once it is fixed.
Good-faith research
We will not take legal action against research done in good faith that follows these rules:
- Use only accounts, keys and websites that are yours, or that you have the owner's permission to test.
- Do not access, change or delete data that belongs to other customers. If you reach data that is not yours, stop, do not keep a copy, and tell us.
- Do not disrupt the service for others: no denial of service, no flooding, no spam.
- No social engineering of our customers or of us, and no physical attempts.
- Give us a reasonable time to fix the problem before you share it with anyone else.
Rewards
We do not run a paid bug bounty. We are grateful for every report all the same.