Security

Reporting a security vulnerability

If you believe you have found a security vulnerability in Veisla, we want to hear about it. Please report it to us privately, so we can investigate and fix it before it is made public.

Send reports to: salg@veislasoftware.no

How to report

Email the address below with a description of the issue and the steps to reproduce it.
Include the affected URL or component, what an attacker could achieve, and any proof of concept you have.
Write in Norwegian or English.

We ask that you

Only access or change data that you own, and stop as soon as you have shown the vulnerability.
Do not degrade the service: no denial of service, spam or load-heavy automated scanning.
Give us reasonable time to fix the issue before you disclose it publicly.

What you can expect from us

We confirm that we have received your report and keep you informed about our progress.
We treat your report confidentially and do not share your details without your permission.
We do not currently run a paid bug bounty programme.

Scope

In scope: this website and the Veisla application and control plane on veislasoftware.no domains.
Out of scope: social engineering, physical attacks, and vulnerabilities in third-party services we do not operate.

A machine-readable version of this contact is published at /.well-known/security.txt.

← Back to Security