Report a vulnerability
Email destek@sezerlabs.com with the subject “Security”. Include the affected URL, reproducible steps and a minimal proof of concept without personal data. Our target is to acknowledge reports within five business days; this is a target, not a guarantee.
Scope and safe research
This policy covers this Sezer Labs website and its /api/contact and /api/chat endpoints. Confirmo and third-party infrastructure are outside scope. Use your own data; avoid disruption, social engineering, bulk scanning and access to other people’s information. Stop and report if you encounter such information. Give us reasonable time to investigate before public disclosure.
Good-faith commitment
We will not initiate legal action against good-faith research that follows this policy. This commitment cannot bind third parties or public authorities. There is no bounty or reward program.
Measures in this application
We use same-origin API checks, input and body-size validation, salted IP rate limits, plain-text chat rendering and restrictive browser security headers. These measures reduce risk; they do not guarantee complete security.