Report a Security Vulnerability

At Sizanid HR, system security is our top priority, but we recognize that vulnerabilities can still exist despite our best efforts. If you discover a security flaw, please let us know immediately. By reporting the vulnerability, you directly help us better protect our systems and clients, allowing us to take swift corrective action.

Ethical Reporting Checklist

  • Report via this form.
  • Limit Proof-of-Concept: Do not exploit the flaw beyond necessary verification (e.g., no data modification, deletion, or excessive downloads).
  • Maintain Secrecy: Do not reveal the issue externally until resolution is confirmed.
  • Avoid Prohibited Attacks: Do not use social engineering, DDoS, spam, or physical security breaches.
  • Provide Details: Include the affected URL/IP and a clear description to ensure we can reproduce and fix the vulnerability as quickly as possible.

What You Can Expect

  1. Fast Response: Evaluation and resolution timeline provided within 48-72 hours.
  2. No Legal Action: Provided you follow our rules, we grant you legal safe harbor.
  3. Confidentiality: Your personal data remains private and will not be shared without your permission.
  4. Updates: We will actively keep you posted on the fix status.
  5. Public Credit: We will publicly name you as the discoverer (unless you request otherwise).

Our goal is the fastest possible problem resolution. Following the fix, we intend to be an active partner in drafting the final public communication about the issue.