Security
Report a security vulnerability
If you have found a weakness in MominSheikh.com, tell us here. Every report is read by a person.
What happens after you report
These response times are our working proposals. They are not yet confirmed commitments.
- Acknowledge
- Within three working days
- Initial assessment
- Within ten working days, with the severity we assign
- Updates
- At least every thirty days until fixed
- Fix
- Within our deadline for the severity
- Disclosure
- Coordinated with you; normally after the fix, and no later than ninety days after the report unless we both agree otherwise
- Credit
- Public thanks, if you want it
How we ask you to test
- Do not open, change or delete data that is not yours.
- Do not disrupt the service for other people.
- Report promptly, and give us time to fix the problem before you publish it.
Not covered
- Social engineering of our staff.
- Physical attacks.
- Denial of service.
- Testing of third-party services we do not control.



