Reporting security vulnerabilities
A security vulnerability is a weakness that someone could use to break into or damage a system. If you find one in our website or apps, please report it to us directly before you make it public.
Scope
The hanzcodes.my.id website and every app whose address ends in .hanzcodes.my.id (*.hanzcodes.my.id), including BukuGembok, NotaKita, QRIS-EDC, SAVIS, LMS Adaptif, and JombangSatu.
How to report
Send an email to founder@hanzcodes.my.id with the subject "Laporan keamanan" (Indonesian for "security report"). In the email, include:
- the address of the affected page or the part of the app concerned,
- the steps we need to reproduce what you found,
- the likely impact if someone misused the vulnerability.
What we ask of you
- Do not access, change, or delete other people's data.
- Do not disrupt the service, for example by flooding our servers (the computers that run our website and apps) with requests.
- Give us time to fix the vulnerability before you publish your finding.
What we do
We reply to reports as soon as we can during office hours (Monday to Friday, 09:00 to 15:00 WIB (UTC+7)). We also keep you informed as the fix progresses.
The same information is available in a standard format at /.well-known/security.txt.