15 / SECURITY
Institutional page for responsible communication concerning the security of Yamanut's public website and systems.
01 / STATUS
A specialised public vulnerability disclosure channel is in preparation.
Until a specialised channel is published, security matters may be routed through institutional contact without including unnecessary sensitive data.
02 / RESPONSIBLE COMMUNICATION
Share only what is needed to identify and route the issue, without conducting unauthorised tests.
Indicate the affected public page or function without sending access details or private data.
Explain what you observed, the potential impact and, if possible, minimal non-intrusive reproduction steps.
Use a valid reply address for any clarification, without assuming a response within a fixed period.
03 / PUBLIC SCOPE
This page does not declare programmes, rewards, response times or testing authorisations that Yamanut has not formally published. This website is not authorisation to test systems, collect third-party data or exploit vulnerabilities.
This page does not announce a bug bounty or public testing programme.
No permission is granted for intrusion, exploitation, third-party access or disclosure of private information.
No SLA, response period or unpublished formal disclosure policy is declared.
04 / SENSITIVE INFORMATION
Do not include passwords, keys, tokens, third-party personal data, exploitation evidence or complete logs. Avoid further intrusive actions. A brief initial description is sufficient for routing.
05 / ROUTING
Until a specialised public channel is available, security matters may be routed through the existing institutional address.
06 / CONTINUE
Consult the Privacy policy, Contact page and Accessibility commitment.