If you have identified a potential vulnerability in Landvex systems, we want to hear from you. We take all reports seriously.
Send details of the vulnerability to our security team. Include a clear description, reproduction steps, affected component, and potential impact. All reports are handled confidentially.
The following are in scope for responsible disclosure:
Third-party services integrated by Landvex are not in scope. Please report those directly to the respective vendor.
Landvex will not initiate legal proceedings against researchers who identify and report vulnerabilities in accordance with this policy. Good-faith research that avoids user data exposure, system disruption, or privacy violations is protected.
We will not share your identity or contact details with any third party without your explicit consent, except where required by law.
Research that involves accessing, modifying, or exfiltrating client or user data; disrupting platform availability; or social engineering of Landvex staff is not covered and may be subject to legal consequences.
Landvex publicly acknowledges researchers who responsibly disclose verified vulnerabilities. Recognition is made with the researcher's consent and listed on our Security page.
Landvex does not operate a formal bug bounty programme at this time. We are grateful to every researcher who contributes to the security of our platform and the integrity of the data we serve to clients.