Security information
How to report a security issue to us.
Responsible disclosure
The security of our services and our customers’ data matters to us. If you find a potential vulnerability in any Gustaffo product, system or website, please report it to [email protected]. We will confirm that we received it within three business days.
This is not a bug bounty program, and we do not offer rewards for reports. We are grateful for every report that helps us protect our customers.
What to include
- A clear description of the issue and the steps to reproduce it.
- The affected system or URL, and a proof of concept if you have one.
- Screenshots and the tools you used, if helpful.
Please
- Tell us about the issue before making it public, and give us reasonable time to fix it.
- Do not access, change, store or share data that isn’t yours. If you come across personal data, stop and tell us right away.
- Do not disrupt our services or harm Gustaffo, our customers or their guests.
- Act within the law.
Out of scope
Phishing, social engineering, physical attacks and any form of denial-of-service attack.
Our commitment
If you report an issue in good faith and follow these guidelines, we will not take legal action against you. We will keep you informed while we work on a fix.
Customers
For questions about your account or our services, please use the customer support portal. Current system availability is shown at status.gustaffo.com.