We welcome good-faith reports about security issues in NervLink services. Please report findings privately and give us a reasonable opportunity to investigate and address them before sharing details publicly.
Email faheem.vapt@gmail.com with the affected URL or component, steps to reproduce, impact, and the minimum proof needed to verify the issue. Avoid sending personal data, customer data, or secrets.
Only test systems you own or have written permission to assess. Do not access or modify another person’s data, disrupt services, use social engineering, or perform destructive testing.
We will acknowledge reports when practical, investigate their scope, and coordinate remediation and disclosure timing. This policy does not authorize testing of third-party systems or create a bug bounty program.