Introduction

At Baited SA, security and privacy are at the core of our mission. We take vulnerabilities seriously and welcome reports from security researchers, partners, and customers.

This policy explains how to report vulnerabilities, what you can expect from us, and how this aligns with our compliance commitments.

Scope

This policy applies to:

• All Baited SA services, applications, and infrastructure.
• Our websites under the baited.io domain.

Reporting a Vulnerability

If you believe you've found a security issue, please let us know:

• Email (preferred): [email protected]
• PGP Key: https://keys.openpgp.org/vks/v1/by-fingerprint/601BEBFFEC0557F1035D94DAD9F96FA7714C08512
• Web form (optional): https://baited.io/en#request-info

Our Commitments

• We will acknowledge receipt of your report within 72 hours.
• We will provide updates on progress at least every 30 days.
• We will work with you to validate and remediate the issue.
• We will not pursue legal action against good-faith security research that complies with this policy.