Reporting a security issue

If you believe you have found a security vulnerability in Maicro, please tell us so we can fix it. Email security@maicro.ng.

What to include

  • The page or address affected and a description of the issue.
  • Steps to reproduce it, and what an attacker could achieve.
  • How we can contact you for follow-up questions.

Please

  • Use only test accounts you created, and access no more data than needed to show the issue.
  • Do not view, change or delete other people's data, and stop if you reach any.
  • Do not run denial-of-service tests, spam, social engineering or physical attacks.
  • Give us reasonable time to fix the issue before telling anyone else about it.

What we will do

We will acknowledge your report, look into it, keep you informed of our progress and let you know when it is fixed. We will not take legal action against anyone who reports an issue in good faith and follows the guidance above. We do not currently run a paid bug bounty programme.

Maicro is operated by MAICRO DIGITAL LTD (RC 9966803). Machine-readable contact details are at /.well-known/security.txt.