SECURITY POLICY

Reporting a Vulnerability

If you’ve discovered a security vulnerability on waternomads.co.nz, please report it to [email protected]. We take all reports seriously and will respond within 5 business days.

Scope

waternomads.co.nz and any subdomains

Our Commitment

We will not pursue legal action against researchers who discover and report vulnerabilities in good faith. We ask that you:

• Do not access or modify customer data
• Do not disrupt site availability
• Give us reasonable time to resolve issues before public disclosure

No Bug Bounty

We currently do not offer a paid bug bounty programme.