Security

Reporting a vulnerability

If you believe you have found a security vulnerability in a Welt Studio Desenvolvimentos LTDA product or website, please tell us. We read every report.

Security contact

How to report

Send an email to the address above with:

• the affected product or URL;
• the steps to reproduce the issue;
• the impact, meaning what an attacker could do with it.

We will reply within 5 business days. Reports can be written in English or Portuguese.

Good faith rules

When researching a vulnerability, please:

• test only with accounts and data that belong to you;
• do not access, modify or delete data that belongs to other people;
• do not run denial of service attacks or anything that degrades our services;
• give us a reasonable amount of time to fix the issue before disclosing it publicly.

We will not take legal action against anyone who reports a vulnerability in good faith and follows these rules.