Scope
This policy covers selamnow.com (this marketing site) and the public lead-capture API. The SelamNow platform itself, its admin surfaces, and customer environments are out of scope here. Institutions report platform issues through their dedicated support channel.
How to report
Email security@selamnow.com with: a description of the issue, reproduction steps, the URL or endpoint affected, and the impact you observed. PGP key available on request.
What we ask
Do not run automated scanners or DoS-style tests against our infrastructure. Do not access or modify data that is not your own. Give us reasonable time to investigate before public disclosure (typically 30 days for a confirmed issue).
Acknowledgement
We acknowledge confirmed reports within 5 business days and credit researchers (with permission) once the issue is resolved.