Skip to content
VenTuhi
Legal & company information

Vulnerability reporting

How to report

Email hello@ventuhi.com with the affected URL or feature, time observed, potential impact and minimal steps using your own authorised account and fictional data where possible. Do not send passwords, live tokens or another person’s records. Ask us first for a secure method if sensitive evidence is necessary.

Testing boundaries

This reporting route is not general permission to test. Obtain written authorisation before intrusive scanning or exploitation. Do not access, change or download other people’s records, bypass venue boundaries, disrupt service, introduce malware, persist access or use social engineering. If personal information appears unexpectedly, stop and report only what is necessary.

What happens next

Our team reviews reports. We will assess the issue and coordinate appropriate follow-up and disclosure. No 24-hour coverage, guaranteed response deadline, bounty, legal immunity or payment is promised. Contact and report information is handled for investigation and communication under our Privacy notice.