Security

SECURITY.md

Security Policy

Reporting a vulnerability

Email info@s0lvesta.com with subject Security: <product>.

Include:

Affected repository / product
Impact
Reproduction steps
Any suggested fix

Do not open a public issue for security reports.

We aim to acknowledge within 2 business days.

Scope

Solvesta CRM and related APIs
Salla themes and storefront code we publish
Org automation and CI

Out of scope

Social engineering against Solvesta staff
Findings on third-party platforms we do not control (including Salla core)

There aren't any published security advisories