Report a vulnerability

Last updated: October 28, 2026

How to report

Send your report to [email protected] with “Security report” in the subject line. It helps if your report includes:

• A description of the issue and where it is: the affected URL or system.
• Clear steps to reproduce it, and proof that it exists.
• Its likely impact, and how we can reach you if we need more details.

Our commitment

• We acknowledge your report within 3 business days.
• We keep you updated as we fix the issue.
• We will not take legal action against anyone who researches in good faith and follows this policy.
• Once the issue is fixed, we credit you by name if you wish.

Rules for responsible research

• Do not access, change or delete other people’s data, and stop as soon as you have proven the issue.
• Do not run denial-of-service (DoS) attacks or any test that disrupts our systems.
• Do not use social engineering or phishing against our team or our clients.
• Give us reasonable time to fix the issue before you publish any details.

Scope

This policy covers akakusdigital.com and its subdomains. Our clients’ systems are out of scope and must not be tested without their written permission.

security.txt

Our security contact details are also published in the standard file used by security teams: /.well-known/security.txt