Report a Security Issue

Last updated: September 2026

We take security reports seriously and appreciate coordinated disclosure. If you've found a vulnerability, report it here - not publicly - and give us a reasonable window to remediate.

Reporting platform abuse instead? If you found harmful content or a Terms-of-Service violation rather than a security vulnerability, use Report Abuse.

How to report

Email security@sentiqra.tech with a description, reproduction steps, and potential impact. For sensitive reports, request our PGP key or use the encrypted channel noted in your acknowledgment.

Customers and registered researchers can also submit confidential evidence through the authenticated report channel - it goes straight to the security mailbox and never becomes a support ticket. A machine-readable version of this policy is published at /.well-known/security.txt.

Protect the evidence: describe any credentials or customer data you encountered rather than pasting them, and do not include other people's secrets in the report itself. If evidence is large or binary, tell us first and we will provide an encrypted transfer channel in the acknowledgment.

Response timeline

Acknowledgment - within 2 business days
Initial triage - within 5 business days
Status updates - at least weekly until resolved

Scope

In scope: the Sentiqra API, portal, authentication, and supporting infrastructure we operate. Out of scope: third-party services, social engineering, physical attacks, and issues requiring unlikely user interaction.

Safe harbor

We consider good-faith security research conducted under this policy to be authorized. We will not pursue legal action against researchers who follow coordinated disclosure, avoid accessing or modifying customer data, and do not disrupt the service.

Coordinated disclosure

We ask for up to 90 days to remediate before public disclosure. We'll agree a disclosure date with you and credit reporters who wish to be acknowledged.

Recognition

We do not currently operate a paid bug-bounty program. We maintain a hall-of-fame acknowledgment for reporters who responsibly disclose valid issues.