At Swarmia, we take the security seriously. We appreciate the efforts of security researchers in helping us maintain a secure environment for our customers.

Scope

• Swarmia's primary application domain at app.swarmia.com
• All production infrastructure and services

Submission Guidelines

Please report security vulnerabilities by emailing security@swarmia.com. Include:

• Clear description of the vulnerability
• Steps to reproduce
• Potential impact
• Any relevant screenshots or proof of concept

Out of Scope

• Denial of Service attacks
• Physical security attacks
• Social engineering attacks
• Third-party services/applications
• Findings from automated vulnerability scanners

Rewards

Swarmia offers rewards for identified and validated security vulnerabilities. The reward amount is determined by our security team based on:

• Severity of the vulnerability
• Quality of the report
• Potential impact on our systems and users
• Complexity of exploitation

All rewards are subject to the final review and approval of Swarmia's security team.

For questions about this policy, contact security@swarmia.com.