Report a Security Issue
Last Updated: August 2026Found a vulnerability on alboritmo.com? We take platform and customer data security seriously — here's how to report it responsibly.
If you have discovered a security vulnerability on alboritmo.com, we encourage you to report it to us immediately. Alboritmo LLC takes the security of our platform and our customers' data very seriously. We review all legitimate reports and aim to resolve confirmed issues as quickly as possible. Please read this page carefully before submitting a report.
If you follow the principles below when reporting a security issue to alboritmo.com, Alboritmo LLC will not initiate legal action or enforcement investigations against you in response to your report.
We ask that you:
- Give us reasonable time to review and fix the issue before disclosing it publicly or sharing it with others
- Do not interact with or access private accounts without the account owner's explicit consent
- Make a good-faith effort to avoid privacy violations, service disruptions, or data destruction
- Do not exploit the vulnerability for any reason, including to demonstrate further risks or access sensitive data
- Comply with all applicable local, state, and federal laws and regulations
Alboritmo LLC recognizes security researchers who help protect our platform by responsibly reporting vulnerabilities. We do not currently offer monetary bounties, but every valid report is reviewed, acknowledged, and credited at our discretion.
To have your report reviewed, you must:
- Follow all fundamentals listed above
- Report a valid security vulnerability that poses a genuine risk to user privacy or platform security
- Submit your report directly to security@alboritmo.com — please do not contact employees directly
- Disclose any accidental privacy violations or service disruptions that occurred during your research
- Understand that response priority is based on risk severity and may take some time
Please provide detailed and reproducible steps in your report — issues that cannot be reproduced may take longer to validate. We assess and prioritize reports based on the following severity levels:
- Remote code execution
- Remote shell or command execution
- Vertical authentication bypass
- SQL injection leaking customer data
- Full account takeover
- Lateral authentication bypass
- Disclosure of sensitive internal data
- Stored XSS affecting other users
- Local file inclusion
- Insecure handling of authentication cookies
- Logic or business process flaws
- Insecure direct object references
- CSRF on sensitive actions
- Unvalidated redirects to external sites
- Open redirects
- Reflected XSS
- Low-sensitivity information leaks
- Missing security headers
The following are generally out of scope for review:
- Denial of Service (DoS/DDoS) attacks or testing
- Spam or social engineering attacks
- Physical security issues
- Vulnerabilities in third-party services or plugins not directly controlled by Alboritmo LLC
- Reports generated solely by automated scanning tools without manual validation
- Issues already known to our team or previously reported
To report a security vulnerability, please send an email to security@alboritmo.com with the subject line: "Security Vulnerability Report – alboritmo.com".
Your report should include: a clear description of the vulnerability, step-by-step instructions to reproduce the issue, the potential impact of the vulnerability, and any screenshots, videos, or proof-of-concept code (if applicable).
We will acknowledge your report within 3 business days and keep you informed of our progress throughout the resolution process.