Responsible Disclosure Policy

We place great importance on the security of our systems and the protection of our users' data.

Our Commitment to Security

The security of AnyAngle.ai and the protection of our users' data are our absolute priorities. If you identify a security vulnerability in our systems, we encourage you to report it to us in a responsible and coordinated manner.

How to Report a Vulnerability

To report a security vulnerability, please send us a detailed email to:

📧 Security email:

security@anyangle.ai

Information to Include in Your Report

To help us understand and quickly fix the vulnerability, please include:

  • Detailed description of the identified vulnerability
  • Clear and precise reproduction steps
  • Potential impact of the vulnerability
  • Proof of concept (screenshots, logs, etc.) if possible
  • Your name and contact information (optional, for recognition)

What We Expect From You

✅ Allowed Behaviors

  • Testing vulnerabilities on your own test accounts
  • Searching for vulnerabilities in our public systems
  • Responsible and coordinated reporting of discovered issues
  • Respecting the privacy and data of other users

❌ Prohibited Behaviors

  • No illegal actions - Respect all applicable laws
  • No unauthorized access - Do not modify, delete, or access data without authorization
  • No service disruption - Avoid any action that could disrupt our services (DoS attacks, spam, etc.)
  • No public disclosure - Do not publicly disclose the vulnerability before we have had the opportunity to fix it
  • No data extraction - Do not copy, download, or delete other users' data
  • No testing on real accounts - Only use test accounts you have created

What You Can Expect From Us

📧 Acknowledgment

We will acknowledge receipt of your report within 3 business days.

🔍 Evaluation and Follow-up

We will evaluate the vulnerability and keep you informed of the progress of its resolution. We aim to:

  • Confirm receipt within 3 business days
  • Provide an initial assessment within 7 business days
  • Keep you regularly informed of progress
  • Notify you when the fix is deployed

🔒 Confidentiality

Your personal information will remain confidential and will not be shared without your consent. We will respect your anonymity if you wish.

🙏 Recognition

With your permission, we would be happy to publicly acknowledge your contribution to AnyAngle.ai's security (for example, on a thank you page or in our communications). Important note: We do not currently offer monetary rewards for vulnerability reports, but we greatly appreciate your contribution to the security of our platform.

Testing Scope

The following systems are authorized for security testing:

  • Main web application (anyangle.ai)
  • Public API
  • Authentication systems

The following systems are out of scope and should not be tested:

  • Private backend infrastructure
  • Third-party services (Supabase, AWS, RunPod) - report directly to these services
  • Denial of service attacks (DoS/DDoS)
  • Spam or phishing

Frequently Asked Questions

Do you offer monetary rewards?

Currently, we do not offer monetary rewards (bug bounty) for vulnerability reports. However, we recognize and greatly appreciate the contributions of security researchers and would be happy to publicly acknowledge your contribution if you wish.

How long does it take to fix a vulnerability?

The fix time depends on the severity and complexity of the vulnerability. We strive to fix critical vulnerabilities as quickly as possible, typically within 30 days. We will keep you informed of progress throughout the process.

Can I test on production accounts?

No. Please create and use only test accounts for your research. Any activity on real production accounts or on other users' data is strictly prohibited.

Updates to This Policy

We may update this responsible disclosure policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to check this page regularly.

Contact

For any questions about this policy or to report a vulnerability, please contact us at:

📧 Security email:

security@anyangle.ai

For general questions, you can also contact: support@anyangle.ai

Last updated: January 2025