Security & Vulnerability Disclosure Policy

Reporting Security Issues

Security researchers may report vulnerabilities involving:

• APIs;
• authentication systems;
• wallet functionality;
• transaction systems;
• web applications; or
• infrastructure components.

Reports should be sent to: security@paymenture.com

Responsible Disclosure

Researchers must:

• avoid service disruption;
• avoid privacy violations;
• avoid unauthorized access;
• avoid data destruction; and
• act in good faith.

Paymenture Rights

Paymenture reserves the right to:

• investigate reports;
• restrict testing activity;
• suspend accounts;
• involve law enforcement; or
• pursue remedies for malicious activity.