Security / responsible disclosure

Report a security concern.

We welcome good-faith reports about Testmera systems and services. Send a concise description to security@testmera.com.

What to include

Describe the affected service, the issue, its potential impact and enough detail for us to understand it. Please avoid sending sensitive data in the first message.

How we handle reports

We will acknowledge reports, coordinate investigation and discuss disclosure timing with the reporter. Please allow time for remediation before public disclosure. We will treat report details confidentially while we work together.

Good-faith research

Use only accounts and data you control. Avoid service disruption, social engineering, privacy intrusion and access beyond what is needed to demonstrate the issue. Stop if you encounter another person’s data and tell us promptly.

Secure contact

For encrypted reports to security@testmera.com, use our Proton PGP public key.

Fingerprint: 05BB 9016 2B26 1E23 FE48 7882 EAE6 09AA 9033 31E3

Our security.txt provides the reporting address.