Security policy

We welcome reports of vulnerabilities in provider.omnidev.tech and pay.omnidev.tech.

How to report

Use the contact form and start the message with "SECURITY". Describe the issue, the steps to reproduce it and its impact. Do not include secrets or other people's data. Our machine-readable contact details are in security.txt.

Guidelines

• Act in good faith: test only with your own funds and requests, do not access or modify other users' data, and stop if you reach it.
• No denial-of-service testing, spam, or social engineering.
• Give us reasonable time to fix an issue before disclosing it publicly.
• We do not run a paid bounty program.