Report Security Issue

Last Updated: March 2026

Security & Vulnerability Disclosure

If you have discovered a security vulnerability on lansaro.com, we encourage you to contact us immediately. We review all legitimate reports and aim to resolve issues as quickly as possible.

Before submitting a report, please review the guidelines below, including our reporting principles and reward criteria.

Fundamentals

If you follow the principles below when reporting a security issue, Lansaro will not initiate legal action or enforcement investigations against you in response to your report.

Allow us reasonable time to investigate and resolve the issue before disclosing it publicly
Do not access or interact with private accounts without permission
Avoid privacy violations, service disruption, or data destruction
Do not exploit the vulnerability beyond what is necessary to demonstrate it
Comply with all applicable laws and regulations

Bounty Program

We appreciate security researchers who help us improve our platform. Rewards may be granted at our discretion based on the severity, impact, and quality of the report.

To be eligible for consideration:

Follow all reporting guidelines listed above
Submit a valid and verifiable vulnerability
Provide clear steps to reproduce the issue
Disclose any unintended data exposure in your report
Allow time for investigation and resolution

Please contact us directly via email to report vulnerabilities.

Rewards

Reward amounts are based on severity and impact. Only the first valid report of an issue is eligible for a reward.

Critical Severity – up to $200
Examples: Remote code execution, full account takeover, SQL injection with data exposure
High Severity – up to $100
Examples: Authentication bypass, sensitive data exposure, stored XSS
Medium Severity – up to $50
Examples: Business logic flaws, insecure references
Low Severity – Recognition Only
Examples: Open redirects, minor vulnerabilities

Responsible Disclosure

We reserve the right to evaluate, prioritize, and disclose vulnerability reports as needed. Reports must be reproducible and clearly documented to be considered.