Security Policy

We take the security of our systems seriously. If you discover a vulnerability, we appreciate your responsible disclosure.

📧 Reporting a Vulnerability

If you believe you have found a security vulnerability, please report it to:

• Email: security@bestsmm.pk
• Web: https://bestsmm.pk/security-report

📜 Scope

This policy applies to all publicly accessible systems owned by BestSMM, including:

• https://bestsmm.pk
• https://www.bestsmm.pk
• API endpoints under our control

🚫 Out of Scope

⚖️ Rules of Engagement

• Do not access or modify user data
• Do not disrupt services
• Do not perform destructive testing
• Only test within scope

⏱ Response Time

We aim to respond within 3–7 business days.

🏆 Responsible Disclosure Rewards

We may offer recognition or rewards depending on severity and quality of the report.

🔐 Safe Harbor

If you follow this policy in good faith, we will not pursue legal action against you.

📅 Updates

This policy may be updated without prior notice.

Last updated: 2026-05-20