Reporting a vulnerability

If you think you found a security issue in Sovaria — the console, the API, the SDKs or the CLI — email tech@sovaria.in with "Security" in the subject. The same address is in security.txt on every Sovaria host.

#What to include

• What you found and where (URL, endpoint or SDK method).
• Steps to reproduce, and what an attacker could do with it.
• Your project ID if you used your own project. Never another customer's data: stop as soon as you can show the issue.

#What we promise

• We reply within 2 business days and keep you updated until it is fixed.
• We will not take legal action over research done in good faith within these rules.
• With your permission, we credit you once the fix is live.

#Please don't

• Access, change or delete data that isn't yours, or keep it after the test.
• Run denial-of-service or load tests against production, or spam other users.
• Publish the issue before it is fixed.

Service availability and past incidents are on the status page.