Responsible disclosure

Draft for review — have this reviewed by your legal counsel before publishing.

Last updated: 18 October 2026

Reporting a vulnerability

If you believe you've found a security vulnerability in an Adiroha website or system, email operations@adiroha.com with the subject “Security report”. Include a description, the affected URL or system, steps to reproduce and any proof of concept.

What we ask

• Give us reasonable time to investigate and fix before any public disclosure.
• Don't access, modify or delete data beyond what's needed to demonstrate the issue.
• Don't use denial-of-service, social engineering or physical attacks.

What we commit to

• Acknowledge your report promptly.
• Keep you informed of progress.
• Not pursue legal action for good-faith research that follows this policy.