Security Policy

Responsible Disclosure

We take security seriously. If you have discovered a security vulnerability in Verbitas, please report it responsibly.

Contact: [email protected]

We will acknowledge your report within 48 hours and aim to resolve critical issues within 30 days.

Scope

  • api.verbitas.io — REST API
  • verbitas.io — Web application and verifier UI
  • Open-source repositories under github.com/Original-Pictures/verbitas

Out of Scope

  • Denial-of-service attacks
  • Social engineering of Verbitas employees
  • Physical security attacks

Hall of Fame

We thank the following researchers for responsible disclosures:

No reports yet. Be the first.