Security Reporting and Vulnerability Disclosure
A reporting channel that does not authorize testing without permission.
How to report
Email an incidentally discovered vulnerability to info@pancaindera.web.id with the subject “Security Report”. Include the affected URL, observation time, observed behavior, and contact details. Avoid sending personal data, credentials, or exploit steps that could be misused.
Testing boundaries
This notice does not authorize scanning, brute forcing, exploitation, data modification, denial-of-service, social engineering, or penetration testing. Active testing requires prior written permission defining scope, schedule, and rules of engagement.
Report handling
PQL will review submissions based on risk and operational capacity and may request additional safe context. This page does not promise response times, rewards, or a bug bounty program. Public disclosure should be coordinated to avoid placing users at risk.
Affected personal data
If a finding involves personal data, do not copy, download, or distribute it. Provide the minimum description needed to identify the issue, and use secure communication if follow-up is necessary.
Use our official contact for inquiries, personal data rights requests, or security reports.
info@pancaindera.web.id ↗