Reporting#
Email security@securinets.tn with the affected URL, steps to reproduce and the impact. We acknowledge reports within 72 hours and fix confirmed issues as fast as we can. This policy is also published at /.well-known/security.txt.
Scope#
- securinets.tn and its API endpoints under
/api/. - ctf.securinets.tn is a separate platform: report issues there through the Discord ticket system during events.
Not a vulnerability#
The hidden flags on this site (Securinets{...} strings in the source, the console and the 404 page) are a game for members. Finding them earns ranking points, not a bounty.
Safe harbour#
Good-faith research that respects this policy, avoids privacy violations, data destruction and service degradation, and gives us reasonable time to fix issues before disclosure will not be reported to law enforcement.
Thanks#
Researchers who report valid issues are credited here with their consent.