Report a vulnerability
If you have found a security vulnerability on the CepParça site or app, email us. Describe step by step how we can reproduce it; adding a screenshot or a sample request helps us move faster.
We will confirm receipt of your report within 3 business days at the latest. We will let you know when the fix is complete. We will not take legal action over reports made in good faith and in line with the rules below.
Scope
- Website and business / admin dashboards
- Mobile app and the API it uses
Rules
- Do not access, change or delete anyone else's account, data or listings. Use your own test accounts.
- Do not run tests that slow down or stop the service (load testing, denial of service).
- Do not send bulk SMS, email or automated form submissions.
- Do not share the information with anyone until the vulnerability is fixed.
- Do not keep any personal data you find; if you saw any, mention it in your report and delete it.