Politica di Divulgazione Responsabile
Nota: Questo è un documento legale disponibile solo in inglese per garantire l'accuratezza giuridica. Di seguito trovi un riassunto in italiano.
Riassunto
Se scopri una vulnerabilità di sicurezza nei nostri sistemi:
- Segnalala via email a mike@lovd.app
- Descrivi la vulnerabilità in dettaglio con i passaggi per riprodurla
- Concedici un tempo ragionevole per rispondere prima di rendere pubblica la divulgazione
- Noi promettiamo: Conferma entro 48 ore, aggiornamenti regolari e protezione da azioni legali
Fuori ambito: Attacchi DoS, spam, social engineering, attacchi fisici e applicazioni di terze parti.
Politica Completa di Divulgazione Responsabile (Inglese)
At lovd, we take security seriously. We appreciate the security research community and believe in responsible disclosure of security vulnerabilities.
Reporting a Vulnerability
If you believe you've discovered a security vulnerability in our systems, please follow these steps:
- Email us at mike@lovd.app with a detailed description of the vulnerability.
- Include steps to reproduce the issue
- Provide any proof-of-concept code if applicable
- Allow us reasonable time to respond and address the issue before public disclosure
Our Commitment
When working with us, you can expect:
- Acknowledgment of your report within 48 hours
- Regular updates on the progress of your report
- Recognition for your contribution (if desired)
- Protection from legal action when following our responsible disclosure policy
Scope
This policy applies to all lovd products and services, including:
- Our web applications and APIs
- Mobile applications
- Infrastructure components
Out of Scope
The following are not considered valid vulnerabilities under this policy:
- Denial of Service (DoS) attacks
- Spam or social engineering attacks
- Physical security attacks
- Third-party applications or websites