Security and Responsible Disclosure

Version V1.0 · Effective 1 October 2026

The security of our systems, accounts, and data is an important part of the RumahAgen service. We encourage responsible reporting of vulnerabilities.

How to Report

Send security reports to support@rumahagen.com, describing the affected component, the steps to reproduce, the estimated impact, and evidence that is safe to share.

Responsible Disclosure

Reporters are asked to give RumahAgen reasonable time to verify and fix the issue before publishing details of the vulnerability.

Testing Limits

Do not access, modify, delete, or disclose other users' data; carry out denial-of-service attacks; use social engineering against staff/users; or take actions that risk disrupting the service.

Response

RumahAgen will assess reports based on risk level, validity, impact, and technical context. Not every report will result in a change or a reward.