🔍 What to Include in Your Report

• Description of the vulnerability
• Steps to reproduce the issue
• Potential impact
• Your contact information

📨 How to Report

Please send all vulnerability reports to:
security@suoq.app

📜 Our Commitment

We will review all reports promptly and respond within 5–7 business days. If the vulnerability is confirmed, we’ll work to resolve it quickly and may credit you for responsible disclosure if permitted.

✅ Responsible Disclosure Guidelines

• Do not publicly disclose the issue until it has been resolved.
• Do not exploit the vulnerability.
• Do not access or modify user data without permission.

🔐 Areas Covered

We welcome reports related to SuoQ Cloud, Standalone systems, API services, customer dashboards, and mobile applications.

❗ Out of Scope

• Social engineering
• DDoS attacks
• Physical security
• Issues requiring root/jailbroken devices

💬 Contact

For urgent matters, reach out to our security team directly at
security@suoq.app.