1. Reporting security issues
If you notice a potential vulnerability affecting Hacktica, report it through the Contact page with a concise description, affected URL and non-destructive steps to reproduce. Do not include passwords, authentication tokens, or another person’s personal data.
2. Safe research scope
This page does not authorize public penetration testing or any testing of Hacktica infrastructure. Obtain written permission and a defined scope before active security testing.
3. Activities to avoid
- Service disruption, excessive traffic, denial-of-service tests or destructive proof-of-concepts.
- Accessing or modifying another user’s data.
- Social engineering, physical intrusion or testing third-party vendors without consent.
- Publicly disclosing exploitable details before the issue has been assessed.
4. Handling reports
The team should acknowledge reports, triage their impact and coordinate a resolution. A verified reporting email, response targets, coordinated disclosure timeline and bug-bounty position should be published once operational.
5. General security guidance
Use a unique password, sign out on shared devices, confirm the correct website domain and report suspicious activity through the Contact page.