Vulnerability Disclosure Policy

Reporting a Vulnerability

Email vulnerability reports to security@tryranktune.com. Please include:

• A description of the issue and its potential impact
• The affected URL, service, or component
• Steps to reproduce the issue, including a proof of concept when helpful
• Any relevant screenshots or logs, with personal or sensitive information removed
• How we can contact you if we need more information

Please do not include passwords, access tokens, or other secrets in your report.

Testing Guidelines

Only test systems and accounts that you own or are authorized to use. Do not disrupt Ranktune services, access or modify another person’s data, or use social engineering, phishing, or physical attacks. If you encounter sensitive information while investigating, stop testing and let us know without accessing or sharing more of it.

If you are unsure whether a system or test is appropriate, contact us before proceeding.

What to Expect

We will review your report, may contact you for additional details, and will work to address confirmed vulnerabilities based on their severity and complexity. We will coordinate with you about remediation and any public disclosure. Please give us a reasonable opportunity to investigate and address an issue before sharing details publicly.

Contact

For security reports, contact security@tryranktune.com.