Skip to main content

Security

Report a security vulnerability

If you have found a weakness in MominSheikh.com, tell us here. Every report is read by a person.

Include the address, the steps and what you saw. Please do not include other people's personal data.

Without an address we cannot reply or keep you informed. We use your name and address only to handle this report; see the privacy notice.

What happens after you report

These response times are our working proposals. They are not yet confirmed commitments.

Acknowledge
Within three working days
Initial assessment
Within ten working days, with the severity we assign
Updates
At least every thirty days until fixed
Fix
Within our deadline for the severity
Disclosure
Coordinated with you; normally after the fix, and no later than ninety days after the report unless we both agree otherwise
Credit
Public thanks, if you want it

How we ask you to test

  • Do not open, change or delete data that is not yours.
  • Do not disrupt the service for other people.
  • Report promptly, and give us time to fix the problem before you publish it.

Not covered

  • Social engineering of our staff.
  • Physical attacks.
  • Denial of service.
  • Testing of third-party services we do not control.