Report a Security Issue
How to privately report a suspected security vulnerability affecting ZyVOP.
Report a Security Issue
If you believe you have found a security vulnerability in ZyVOP, please report it privately by emailing [email protected]. Do not disclose the issue publicly until we have had a reasonable opportunity to investigate and address it.
Include the following when possible:
- The affected URL, feature, or component
- Clear reproduction steps
- The expected and observed behavior
- Your assessment of the potential impact
- Sanitized screenshots, logs, or proof-of-concept details
Do not send passwords, API keys, developer tokens, personal data, or other live credentials. Redact sensitive values from supporting evidence.
Responsible Testing
Please avoid accessing or changing data that does not belong to you, degrading service availability, using social engineering, or testing denial-of-service scenarios. Stop testing and contact us if you encounter another user's data or believe continued testing could cause harm.
Good-faith reports that follow these guidelines are appreciated. We will use the contact details in your report to acknowledge it and coordinate any necessary follow-up.