Security.

Report a potential issue privately so it can be investigated before public discussion.

Report a security issue

Email hello@syrava.com with the subject “Security report”. Include the affected hostname or product, reproduction steps, impact, screenshots or proof, and a safe way to contact you.

Please do

• Test only accounts and data you own or have permission to use.
• Minimize access to personal data and stop when impact is confirmed.
• Allow reasonable time for investigation and remediation.
• Keep the issue private while we work on it.

Please do not

• Use denial-of-service, destructive, social-engineering, phishing, spam, or physical attacks.
• Access unrelated user data, modify data, or persist access.
• Demand payment or threaten disclosure.
• Test third-party services outside our control.

Current website protections

The company site is served through Cloudflare with HTTPS, security headers, restricted browser permissions, and no application login surface. Individual Syrava products have separate security models and must publish their own security and privacy documentation before launch.

Response

We will acknowledge credible reports as capacity allows, investigate, and communicate material next steps. This page is not a promise of a paid bug bounty.