Responsible Disclosure
Help us investigate potential security vulnerabilities safely and responsibly.
Contact
Email security@sonavera.ai with a clear description, affected URL or component, reproduction steps, and the impact you observed. Please omit real biometric data, customer data, credentials, and secrets.
Safe research
Use only accounts and data you are authorized to test. Do not disrupt availability, access another person’s data, perform social engineering, or retain data beyond what is needed to report the issue. Stop testing and contact us if you encounter sensitive information.
What to expect
We will acknowledge a well-formed report, investigate it, and coordinate remediation and disclosure timing based on the issue’s risk. This page does not offer a bug bounty or promise payment.