Report a Security Issue

At Aberdeol, we take the security of our website, systems, and customer data seriously. If you are a security researcher, customer, or member of the public and believe you have discovered a vulnerability or security issue on our platform, we welcome your help in responsibly disclosing it to us.

1. How to Report a Vulnerability

If you identify a security issue, please notify our technical support team immediately via email:

Security Contact Email: support@aberdeol.shop
Email Subject Line: [SECURITY REPORT] Brief description of the issue

To help us assess and resolve the issue quickly, please include as much of the following information as possible:

A detailed description of the vulnerability and its potential impact.
Step-by-step instructions or proof-of-concept (PoC) code to reproduce the issue.
Affected URLs, endpoints, parameters, or system components.
Screenshots or screen recordings, if applicable.

2. Responsible Disclosure Guidelines

We ask all researchers and users participating in responsible disclosure to adhere to the following principles:

Avoid Data Destruction: Do not access, modify, delete, or exfiltrate customer data or sensitive business information.
Avoid Service Interruption: Do not perform Denial of Service (DoS/DDoS) attacks, spam forms, or cause service degradations.
Privacy Respect: Perform research only on your own test accounts or non-sensitive endpoints without violating the privacy of other users.
Confidentiality: Keep details of any discovered vulnerability confidential until our team has had a reasonable timeframe to investigate and remediate the issue.

3. Our Response Process

Once a security report is submitted:

Acknowledgment: We will acknowledge receipt of your security report within 1 to 2 business days.
Investigation: Our technical team will investigate and validate the report.
Remediation: If verified, we will prioritize fixing the issue based on its severity.
Follow-Up: We will notify you once the issue has been resolved or mitigated.

4. Safe Harbor

If you conduct security research in good faith and in strict compliance with this policy, we will consider your research authorized and will not pursue legal action against you regarding your submission.