Security.txt

1. Purpose

Security.txt is commonly used to help security researchers and customers find the right contact for a security report. This page provides that contact for AdFence and sets practical boundaries for a useful report. For an overview of the safeguards and product controls we currently describe, read our Security page.

2. Report a Suspected Security Issue

Send a suspected security issue affecting the AdFence website or Service to hello@adfence.io. Use a clear subject line that says the message concerns security so it can be identified correctly.

3. What to Include

Include the detail you already have, such as:

• what you observed and which AdFence page or feature was involved;
• when you observed it, including your time zone;
• steps that reproduce the issue, if you can reproduce it safely;
• screenshots or non-sensitive error messages that clarify the behaviour; and
• an email address where we can ask follow-up questions.

4. What Not to Send

Do not include passwords, access tokens, or other secrets. Do not access, change, download, or disclose another person's data to demonstrate a concern, and do not continue testing if it could affect a live advertising account, campaign, or another user.

5. Scope

This contact is for suspected issues in AdFence. Reports about Meta, Google, TikTok, Slack, Telegram, Stripe, or another third-party service should also be directed to that service through its own published security channel. Their systems and disclosure processes are not controlled by AdFence.

Use of AdFence remains subject to our Acceptable Use Policy, including its limits on probing, scanning, unauthorised access, and disruption.

6. What Happens Next

We assess reports using the information provided and may contact you for clarification. The action appropriate to a report depends on its substance and impact. This page does not create a service commitment or alter any rights or obligations under our published terms.

Threasury Media LLC — operator of AdFence.