Security & Vulnerability Disclosure

We take the security of our customers seriously. If you've found a potential vulnerability in Stalbe's, we welcome your report and will work with you in good faith.

How to report

Email security@stalbes.md with:

A clear description of the issue and its impact
Steps to reproduce (URL, payload, timestamps)
Your name or handle, if you'd like credit

We aim to acknowledge new reports within 3 business days.

Scope

In scope: this website and its public API endpoints. Out of scope: social engineering, physical attacks, denial-of-service, and reports based purely on automated-scanner output without a working proof of concept.

Safe harbor

We will not pursue legal action against researchers who act in good faith, avoid privacy violations and service degradation, and give us a reasonable window to fix the issue before public disclosure.

Machine-readable contact

See /.well-known/security.txt (RFC 9116).