Legal / Security

Responsible Disclosure

How to report a security issue affecting selamnow.com or the SelamNow public surfaces.

Effective: 2026-10-06

Scope

This policy covers selamnow.com (this marketing site) and the public lead-capture API. The SelamNow platform itself, its admin surfaces, and customer environments are out of scope here. Institutions report platform issues through their dedicated support channel.

How to report

Email security@selamnow.com with: a description of the issue, reproduction steps, the URL or endpoint affected, and the impact you observed. PGP key available on request.

What we ask

Do not run automated scanners or DoS-style tests against our infrastructure. Do not access or modify data that is not your own. Give us reasonable time to investigate before public disclosure (typically 30 days for a confirmed issue).

Acknowledgement

We acknowledge confirmed reports within 5 business days and credit researchers (with permission) once the issue is resolved.