Security

Send vulnerability reports to security@micrantha.com with Security Report in the subject line.

Include the affected URL, product, component, impact, reproduction steps, proof-of-concept details, and any logs or screenshots that help Micrantha validate the issue quickly.

Scope

This disclosure channel covers public Micrantha-owned websites, applications, and services. If you are unsure whether a system is in scope, include the hostname or repository reference in your report so Micrantha can clarify.

Good-Faith Research

Micrantha welcomes good-faith security research that helps improve the security of Micrantha systems.

Please avoid:

• accessing, modifying, or destroying other people's data
• disrupting service availability or degrading production systems
• social engineering, phishing, spam, or physical attacks
• using privacy-invasive or destructive proof-of-concept techniques

What to Expect

Micrantha reviews reports, validates issues, and prioritizes remediation based on severity and impact. For coordinated disclosure, note that in the report and include your preferred contact details.

Bug Bounty

Micrantha does not currently advertise a paid bug bounty program unless a separate written program states otherwise.