Vulnerability reporting
Tell us about suspected security problems responsibly.
How to report
Email hello@ventuhi.com with the affected URL or feature, time observed, potential impact and minimal steps using your own authorised account and fictional data where possible. Do not send passwords, live tokens or another person’s records. Ask us first for a secure method if sensitive evidence is necessary.
Testing boundaries
This reporting route is not general permission to test. Obtain written authorisation before intrusive scanning or exploitation. Do not access, change or download other people’s records, bypass venue boundaries, disrupt service, introduce malware, persist access or use social engineering. If personal information appears unexpectedly, stop and report only what is necessary.
What happens next
Our team reviews reports. We will assess the issue and coordinate appropriate follow-up and disclosure. No 24-hour coverage, guaranteed response deadline, bounty, legal immunity or payment is promised. Contact and report information is handled for investigation and communication under our Privacy notice.