At Solarity (“we,” “our,” or “us”), we take the security of our website seriously.
We appreciate the efforts of security researchers and the community in helping us keep our website safe.
This Responsible Disclosure Policy outlines how you can report potential security vulnerabilities to us.
1. Our Commitment
We are committed to:
- Reviewing all legitimate vulnerability reports
- Responding to reports in a timely manner
- Fixing validated security issues as quickly as possible
- Keeping you informed about the progress of your report
2. Scope
This policy applies to:
Out of scope:
- Third-party services or websites linked from our site
- Social engineering or phishing attempts
- Physical security issues
3. How to Report a Vulnerability
If you discover a potential security issue, please report it by providing:
- A clear description of the vulnerability
- Steps to reproduce the issue
- Any supporting material (screenshots, videos, logs)
- The potential impact of the vulnerability
📧 Send your report to: [Insert Security Email]
4. Guidelines for Researchers
We ask that you:
- Act in good faith and avoid violating user privacy
- Do not exploit the vulnerability beyond what is necessary to demonstrate it
- Do not access, modify, or delete data that does not belong to you
- Avoid disrupting the website or its services
- Give us reasonable time to fix the issue before public disclosure
5. What You Can Expect From Us
When you submit a report:
- We will acknowledge receipt within 2–5 business days
- We will investigate and validate the issue
- We will keep you informed about progress (when appropriate)
- We may credit you for the discovery (if desired)
6. Safe Harbor
If you follow this policy:
- We will not take legal action against you
- Your research will be considered authorized
- We will work with you in good faith to resolve the issue
7. No Bug Bounty Program
Currently, Solarity does not offer a paid bug bounty program.
However, we greatly appreciate responsible disclosures and may offer acknowledgment where appropriate.
8. Updates to This Policy
We may update this Responsible Disclosure Policy from time to time.
Changes will be posted on this page with an updated effective date.
9. Contact
For all security-related concerns:
