Security policy
We take the security of Silytics and its users seriously. If you believe you have found a vulnerability, please tell us. This policy sets out how to do that safely.
1. Reporting
Email [email protected] with a clear description, the affected address, steps to reproduce, and your contact details. Please do not publish details until we have had a reasonable chance to fix the issue. We aim to acknowledge reports within 5 working days.
2. In scope
The public website at silytics.si and its API endpoints.
3. Please do not
- access, modify or delete data that is not yours, or use a vulnerability beyond what is needed to demonstrate it;
- run denial-of-service tests, mass scanning, social engineering, phishing or physical attacks;
- test third-party services we use (Cloudflare, Resend, hosting providers, blockchains and wallets) through our systems;
- use automated tools that generate heavy traffic.
4. Our commitment
If you act in good faith and follow this policy, we will not pursue legal action against you for your research. We cannot promise a reward. We will credit you if you wish, once the issue is fixed.
5. Out of scope
Reports about missing best-practice headers without a demonstrated impact, automated scanner output without analysis, and issues in the SLTX contract, which is immutable and public (verified source on BscScan; it has not been independently audited).
6. Unauthorized access
Access to systems beyond what is described here is unauthorized. We log and block abusive traffic and may report serious cases to the authorities. For automated visitors, see our message to AI agents.