How to report
Email contact@mylayr.com with “Security” in the subject. Please include:
- What you found and where (the URL or component)
- Steps to reproduce it, and any proof of concept
- The impact you think it has
- How we can reach you, if you’d like credit or follow-up
Please report issues privately to us first, and give us reasonable time to fix them before sharing details with anyone else.
What to expect
- We aim to acknowledge reports within 3 business days
- We will confirm whether the issue is valid and keep you updated as we work on it
- We will let you know when it is fixed
Scope
In scope: mylayr.com and its subdomains.
Out of scope:
- Denial-of-service or load testing
- Social engineering, phishing or physical attacks on our staff or offices
- Spam or automated submissions to forms
- Reports from automated scanners without a demonstrated impact
- Issues in third-party services we use, which should be reported to that provider
Safe harbor
If you act in good faith under this policy, avoid privacy violations, data destruction and service disruption, only access the minimum data needed to show the issue, and don’t keep or share data you access, we will consider your research authorized and won’t pursue legal action against you for it.
Contact
Security reports: contact@mylayr.com
Machine-readable contact details: security.txt