Found a vulnerability? Write to us.
Please let us fix it before making it public. In return we commit to answering quickly, never pursuing you for good-faith research, and crediting you if you want.
How to reach us
Write to security@lynks.pro. If you get no acknowledgement within 72 hours, write again through the site contact form: it means the message was lost, not that we are ignoring it.
A useful report fits in a few lines: what you found, how to reproduce it, and what it lets someone do. A screenshot or a single request is often enough.
security@lynks.proWhat we commit to
- Acknowledgement within 72 business hours.
- A first assessment, including how severe we think it is, within 7 days.
- Updates on the fix, and a heads-up as soon as it ships.
- No legal action against good-faith research that follows this policy.
- Public credit under your name or handle, if you want it, once the issue is fixed.
What is allowed
- Testing against your OWN accounts, pages and data.
- Creating as many test accounts as you need, on lynks.pro.
- Looking for authorization, authentication, injection or configuration flaws.
- Telling us about someone else's data you came across by accident, stopping immediately.
What is not allowed
These limits are not formalities: they protect real people, both creators and their visitors.
- Accessing another user's data, copying it, keeping it or sharing it.
- Degrading the service: denial of service, mass sending, deliberate saturation.
- Phishing, social engineering, or attempts against our providers or our own accounts.
- Changing or deleting data that is not yours.
- Publishing the issue before it is fixed, or asking for money in exchange for silence.
Rewards
We have no bug bounty at this stage, and we would rather say so plainly than let you hope. A serious report gets a serious answer, public credit if you want it, and our gratitude.
Publication timeline
We ask you to wait for our fix before publishing, and at most 90 days. After that you are free to publish even if we are not done: that is our responsibility, not yours.