Responsible Disclosure

Security First.

At VenditPay, we value the security community. If you've discovered a vulnerability, we want to hear from you.

Our Policy

VenditPay (by RYEN SERVICES) is committed to ensuring the safety of our users' digital assets. We encourage security researchers to practice Responsible Disclosure. We pledge not to initiate legal action against researchers who penetrate our systems within the guidelines of this policy.

The Rules of Engagement

DO:

  • • Report findings immediately to us.
  • • Provide a detailed PoC (Proof of Concept).
  • • Give us time to fix the issue before disclosure.

DO NOT:

  • • Access or modify user data.
  • • Perform DDoS attacks on our infrastructure.
  • • Use social engineering or phishing.

Scope

This policy applies to the following assets:

*.venditpay.com.ng VenditPay Android APK

Recognition & Rewards

While we do not currently offer a monetary bug bounty program, we provide:

Hall of Fame Credit Early Access to Beta Features Swag (For Critical Bugs)

Found something?

Submit your report securely via email. Encrypting with PGP is encouraged for critical leaks.

Submit Bug Report