Security
Report a vulnerability
Write to security@learnya.ai, or use the contact form and choose “Report a bug”.
The first message
What to send us.
From the first message
Give the address or the feature affected, the steps to reproduce, what an attacker gains, and a proof: a screenshot or a request.
A technical detail
A message with no technical detail gets no follow-up.
Our commitment
What we do with your report.
An acknowledgement
We acknowledge receipt within 5 working days.
Progress kept up to date
We keep you informed of the progress until the fix.
A public thank you
Once the flaw is fixed, we thank you publicly if you wish.
Limits
What you do not do.
Other people's data
Do not access or change other people's data.
No denial of service
Do not run any denial of service attack.
No social engineering
Do not target our teams or our users with social engineering.
Your accounts only
Test only on accounts that belong to you.
Reward
No financial reward.
No reward programme
We have no financial reward programme.
No precondition
A message that asks for an agreement or a payment before showing the flaw gets no answer.