Report security concerns safely.

1. How to report

Email hello@skyvtuworld.com with the affected URL or component, reproduction steps, impact, supporting evidence and a safe contact method. Do not include personal data that is not necessary.

2. Good-faith testing rules

• Test only systems you are authorised to test.
• Avoid privacy violations, persistence, social engineering, denial of service, destructive actions and data alteration.
• Use the minimum access needed to demonstrate the issue.
• Stop and report if you encounter personal, confidential or production data.
• Do not publicly disclose before SkyVTU has a reasonable opportunity to investigate and remediate.

3. Our response and safe-harbour intent

We aim to acknowledge credible reports, assess severity, coordinate remediation and provide reasonable progress updates. Where a researcher acts lawfully, in good faith and within this policy, SkyVTU does not intend to pursue action merely for the authorised research. This policy does not authorise testing of third-party or client systems.