If you believe you have found a security issue affecting Metyris, email security@metyris.com.
What to include
Please include the affected URL or feature, a clear description of the issue, reproducible steps, the browser or device used, the likely impact, and any minimal proof needed to understand the report. Do not include personal data or content that belongs to another person.
Good-faith testing
You may inspect publicly available pages and use your own test files, accounts and devices. Keep requests at a normal human rate, stop when you have enough evidence, avoid persistence, and give us a reasonable opportunity to investigate before public disclosure.
Do not perform denial-of-service or load testing, social engineering, phishing, physical testing, automated scanning that degrades service, privacy-invasive testing, or any attempt to access another person’s data. Do not upload malware, alter data you do not own, bypass third-party access controls, or exploit an issue beyond the minimum needed to demonstrate it.
What to expect
We will acknowledge a valid report when reasonably possible, investigate based on severity and reproducibility, and share material status changes when practical. Timelines vary with complexity. Please coordinate disclosure so users can be protected before technical details are published.
Metyris does not currently operate a bug bounty and does not promise payment or rewards.