Responsible Disclosure Program

At Breevar, the security of our website and the privacy of our customers are top priorities. We are committed to working with the security community to identify and address vulnerabilities in our systems. If you have discovered a security issue on Breevar.com, we encourage you to report it responsibly.

Guidelines for Reporting

To ensure a safe and constructive process, please adhere to the following guidelines when submitting a vulnerability:

1. Avoid Privacy Violations: Do not access or delete any data other than your own.
2. Do No Harm: Avoid actions that could degrade Breevar’s service quality or impact other users, such as DoS attacks.
3. Be Respectful: Make a good-faith effort to avoid privacy invasions, data destruction, and service interruption.

Reporting a Vulnerability

Please include the following in your report:

• Detailed Description: Explain the vulnerability type and where it is located.
• Steps to Reproduce: Provide specific steps or a proof-of-concept.
• Supporting Information: Any additional information that can help us understand and validate the issue.

Send your report to hello@breevar.com.

What to Expect

• Acknowledgment: We will confirm receipt of your report within three business days.
• Assessment and Response: Our security team will assess your submission and provide an estimated resolution timeline.
• Recognition: With your permission, we may acknowledge your contribution on our site.

Legal Considerations

By responsibly submitting your findings, Breevar commits to not pursuing legal action against you for research conducted under this program in alignment with the guidelines above.

Thank you for helping us protect our users’ privacy and security