# security.txt for ramzinex.ir
# Generated: 2025-09-20
# Expires: 2026-09-20T00:00:00Z
# Contact channels (preferred)
Contact: mailto:security@ramzinex.com
# Scope (domains in-scope)
Scope: ramzinex.ir
Scope: *.ramzinex.ir
Scope: rmzi.ir
Scope: *.rmzi.ir
# Explicit exclusions (out-of-scope)
Scope-Exceptions: https://ramzinex.ir/blog
Scope-Exceptions: https://ramzinex.ir/club
Scope-Exceptions: https://ramzinex.ir/help
Scope-Exceptions: https://content.ramzinex.ir
Scope-Exceptions: https://docs.ramzinex.ir
# Policy & program details
Policy: https://ramzinex.ir/bug-bounty
Acknowledgments: https://ramzinex.ir/bug-bounty#acknowledgments
# Preferred languages for reports
Preferred-Languages: en, fa
# Canonical location
Canonical: https://ramzinex.ir/security.txt
# -----------------------
# Legal & safe-harbor summary (English)
# -----------------------
# No legal action will be taken against you if your approach is benevolent and complies with the following conditions:
# - You do not exploit, and you will not exploit, any vulnerability you discover.
# - You do not and will not perform system testing/research with intent to harm ramzinex, its customers, employees, partners or suppliers.
# - You have not used, misused, deleted, altered or destroyed, and you will not use, misuse, delete, alter or destroy any data you have accessed or may access in connection with the vulnerability and/or error discovered.
# - You do not and will not carry out attacks such as social engineering, phishing, DDoS or data exfiltration.
# - You will not attempt to test physical security controls.
# - You have not and will not violate any applicable laws in connection with your report.
# - You agree not to disclose to any third party any information relating to your report, the vulnerabilities and/or errors reported, or the fact that a vulnerability and/or error has been reported, unless authorized.
# - We do not guarantee that you will receive a response. We will contact you regarding your report only if we deem it necessary.
# - You agree to submit reports without any expectation or requirement of reward or other benefit, financial or otherwise, unless stated in the policy.
# -----------------------
# Additional program rules (from your bug-bounty policy)
# -----------------------
# In-scope: ramzinex.ir, *.ramzinex.ir, rmzi.ir, *.rmzi.ir
# Out-of-scope examples include (non-exhaustive): ramzinex.ir/blog, ramzinex.ir/club, ramzinex.ir/help, content.ramzinex.ir, docs.ramzinex.ir, social engineering, physical attacks, third-party sites, DoS/DDoS, theoretical issues without PoC, automated scanner-only reports, issues without security impact, public leaked credentials, captcha brute force, SSRF (DNS only), open redirects (POST-based), and more — see full policy.
# Testing must be performed only on your personal accounts; accessing/modifying other users' data is prohibited.
# Subdomain test/debug environments that are not authorized are forbidden.
# Similar vulnerabilities across multiple domains will be rewarded only once.
#
# Reporting requirements (required for a valid report)
# - Step-by-step reproduction steps (Reproduction Steps)
# - Attack scenario (description of impact and how it could be abused)
# - Proof-of-Concept (PoC) — video preferred for complex flows
# - Browser/OS/environment and payloads used
# - Any remediation hints if available
# Reports based only on automated scanner output or without PoC will be rejected.
# Send reports to: mailto:security@ramzinex.com
#
# -----------------------
# Notes on encryption
# -----------------------
# We do not require the use of GPG/PGP for communication. If you need end-to-end encryption for sensitive data, please use the secure contact form on our bug bounty page or request an encryption key from security@ramzinex.com.
#
# -----------------------
# Expiration
# -----------------------
Expires: 2026-09-20T00:00:00Z