Report Security Issues

REPORT SECURITY ISSUES

If you believe you have discovered a security vulnerability on avioora.com, we encourage you to report it responsibly so we can investigate and address the issue.

Our goal is to protect our customers, website, and systems while treating security researchers respectfully. Please review the guidelines below before submitting a report.

RESPONSIBLE DISCLOSURE FUNDAMENTALS

When researching or reporting a potential vulnerability, we ask that you:

Report the issue promptly and provide reasonable details so we can investigate it.
Allow us reasonable time to assess and address the issue before publicly disclosing it.
Do not access, modify, download, or disclose other people’s personal information or private accounts.
Do not disrupt our website, interfere with transactions, damage data, or affect other users.
Do not use vulnerabilities to access systems or information beyond what is strictly necessary to demonstrate the issue safely.
Do not install malware, conduct social engineering, perform denial-of-service attacks, or use other harmful testing methods.
Follow applicable laws and regulations and stop testing if you encounter sensitive information or unexpected access to data.

REPORTING A SECURITY ISSUE

Please email contact@avioora.com with the subject line “Security Vulnerability Report.” Include the affected URL or component, a description of the potential vulnerability, steps to reproduce it safely, its potential impact, and any supporting screenshots or technical details that do not expose personal or confidential information.

Please do not include passwords, payment card details, or unnecessary personal data in your report. If you believe information has been exposed, describe the type of exposure without sending copies of the data.

REPORT REVIEW AND RESPONSE

We will review reports in good faith and prioritize them according to severity, impact, and reproducibility. We may contact you for clarification or additional information. Response and remediation times may vary depending on the complexity and risk of the issue.

REWARDS AND RECOGNITION

Avioora does not currently promise monetary rewards for vulnerability reports. Unless a written reward program is published by Avioora, submissions are handled on a voluntary basis and do not create an entitlement to payment. We appreciate responsible reports that help improve our security.

SCOPE AND LIMITATIONS

Only test systems and accounts that you own or have explicit permission to assess. Do not attempt to access customer accounts, payment systems, private data, or internal infrastructure without authorization. Do not conduct destructive testing or actions that could affect the availability of our services.

We reserve the right to determine whether a report is valid, whether further investigation is appropriate, and what remediation steps to take. Nothing in these guidelines authorizes conduct that is unlawful or outside the scope of permission you have received.

CONTACT INFORMATION

Website: https://avioora.com
Address: 6100 N 10th St, McAllen, TX 78504, USA
Phone: +1 (956) 311-5678
Email: contact@avioora.com

For security reports, email contact@avioora.com with the subject line “Security Vulnerability Report.”

Business Hours:
Monday – Saturday: 9:00 AM – 10:00 PM
Sunday: Closed