security at kazvor.

kazvor.com is served entirely over HTTPS. all data transmitted between your browser and this website is encrypted in transit.

contact form submissions are validated on the server and protected by shared sending limits and duplicate checks. email credentials are read on the server and are not included in the contact form sent to your browser.

we review and update our security measures on an ongoing basis as the website evolves.

if you believe you have found a security vulnerability on kazvor.com, we ask that you report it to us responsibly before disclosing it publicly.

when reporting, please include:

• a clear description of the vulnerability
• steps to reproduce the issue
• the potential impact, as you see it

we will acknowledge your report promptly and work to address confirmed issues as quickly as possible. we ask that you give us reasonable time to investigate and respond before any public disclosure.

we appreciate the effort of anyone who takes the time to report issues in good faith.

the following are outside the scope of our responsible disclosure policy:

• automated scanning or testing without prior permission
• denial of service attempts
• social engineering or phishing attempts targeting kazvor or its clients
• vulnerabilities in third-party services we use but do not control

to report a security concern, email us at the address below with the subject line “security”. we do not operate a public bug bounty programme, but we will always acknowledge responsible reports.

a machine-readable version of this policy is available at /.well-known/security.txt