PinAmHow to report
Email support@dankore.com with "Security report" in the subject, or use the feedback form and choose "A security problem". Please do not post the problem publicly or open it on social media until we have fixed it.
What to include
- The page or address where you found the problem.
- The steps to reproduce it, and what an attacker could do with it.
- Screenshots or requests that show it, with any real customer details removed.
- How we can reach you, and the name you would like us to credit, if any.
What we ask of you
- Use your own business account and your own links. Do not open, change or delete anyone else's data beyond the minimum needed to show the problem.
- If you reach a customer's name, phone number or delivery details, stop, do not keep a copy, and tell us.
- Do not run denial-of-service tests, spam, or attempt to trick our staff or businesses.
- Give us reasonable time to fix the problem before you talk about it publicly.
What we will do
- Confirm we received your report within three working days.
- Keep you updated while we investigate and fix it, and tell you when it is fixed.
- Credit you when the fix is out, if you want us to.
- Not take legal action against research done in good faith that follows these rules.
Out of scope
Problems in Paystack, NIPOST or Google services should go to them directly. Reports that only list missing best-practice headers, automated scanner output without a working example, or issues that need a stolen device or password are unlikely to qualify. PinAm does not pay cash rewards for reports.