01 How to report
Write to contact@bellum-it.com with the affected URL or component, the steps to reproduce and the impact you observed. French or English.
02 Rules
- Test only your own accounts and data; never access, modify or keep another customer’s data.
- No denial of service, no social engineering, no physical attacks, no automated mass scanning.
- Give us a reasonable time to fix before any public disclosure.
03 What you can expect
An acknowledgement within 5 working days, then a status update as the fix progresses. We do not take legal action against good-faith research that follows these rules.