Report a security problem

If you think you have found a weakness in the Miftahi app, its servers or this website, thank you. Please tell us privately so we can fix it before anyone is harmed.

What we promise

• We reply within 5 days to say we have your report, and keep you told about the fix.
• We will not take legal action against you for research that follows the rules below, done in good faith.
• With your permission, we will thank you by name once it is fixed.

The rules

• Only use your own accounts. Never open, change or delete anyone else's information. If you reach someone else's data by accident, stop, do not keep it, and tell us.
• Do not slow down or break the service for others: no denial-of-service, flooding or spam.
• No tricking or pressuring our learners, family or team (no phishing or social engineering), and no physical attempts.
• Give us a fair time to fix it before telling anyone else.

Not in scope

• Reports from automated scanners with no real impact.
• Missing headers or settings that do not lead to a real attack.
• Problems in Apple's, Google's or other companies' services: please report those to them.

We are a small project and do not pay rewards, but we are truly grateful for your help.