Security reporting policy
Updated
If you find a suspected vulnerability affecting mrsolanki.co.uk, please report it privately so we can investigate.
How to contact us
Email support@mrsolanki.co.uk with the subject “Security report”. English is our preferred language. The machine-readable contact file is security.txt.
Include the affected URL or feature, a short description, minimal reproduction steps and the potential impact. Use a test account you control. Redact personal information from screenshots and do not email passwords, licence keys, full card details or other customers’ records. If your evidence contains sensitive information, describe it first and ask how to transfer it safely.
Keep reports and testing safe
This policy is an invitation to report findings, not blanket authorisation to test our systems or third-party infrastructure. Do not access another person’s account or data, change or delete records, make purchases, disrupt availability, run high-volume scans, send spam, or attempt social engineering. Stop if you encounter information that is not yours and report the minimum necessary details.
Supabase, Stripe, TradingView, Myfxbook and our other providers operate their own systems and disclosure policies. Their infrastructure is not authorised for testing by this page.
What happens next
We will review reports and may request clarification. Please keep vulnerability details private while we investigate and coordinate disclosure with us. No response deadline, payment or bug bounty is promised. Ordinary account, billing and setup questions should go through customer support.