Responsible vulnerability disclosure

This translation is provided for information. If versions differ, the Romanian version prevails.

Prime Moment SRL encourages responsible reporting of security issues that may affect lavete-sibiu.ro or data processed through this website.

1. Security contact

Email office@lavete-sibiu.ro with the subject “Security report lavete-sibiu.ro”. Include the affected page, reproduction steps, estimated impact and enough technical evidence for verification.

2. Scope

This policy covers the public lavete-sibiu.ro website and its web functions. Third-party services, social accounts and infrastructure not controlled by Prime Moment are excluded.

3. Testing rules

Do not disrupt the service, use social engineering, modify or delete data, or access more information than strictly required to demonstrate the issue. Do not include personal data in the report; anonymise all evidence.

4. After reporting

We will acknowledge receipt and assess the report within a reasonable time. Keep the information confidential until the issue is fixed or coordinated disclosure is agreed.

5. Rewards

This policy is not a bug-bounty programme. Any reward can exist only when agreed in writing before testing.