Security Practices

Security information and vulnerability reporting guidance for CVEalert.io

Last updated: September 11, 2026

Security is central to CVEalert.io. This page summarizes our current practices and explains how to report a vulnerability responsibly.

Our Security Approach

Our measures include:

  • Encryption in transit using HTTPS/TLS
  • Primary application data hosted in EU data centers
  • Supported service providers configured to use EU regions where available
  • Password hashing and salting
  • Optional two-factor authentication (2FA)
  • Restricted access to production systems and sensitive operational data
  • Network controls, logging, monitoring, and remote backups
  • Reviews and automated checks for security-sensitive code and configuration changes
  • Vulnerability scanning, dependency monitoring, and regular updates
  • Stripe-hosted payment processing, so we do not store full payment-card details

No system can be completely secure. We review and improve these measures as the Service develops. More information about personal-data handling is available in our Privacy Policy.

Reporting a Vulnerability

If you believe you have found a security vulnerability affecting CVEalert.io, app.cvealert.io, or our related services, email:

Please include enough information to reproduce and understand the issue, such as the affected location, steps to reproduce, potential impact, and any supporting evidence.

When testing, please:

  • Avoid accessing, changing, or deleting other users’ data
  • Avoid disrupting the Service or degrading its availability
  • Do not use social engineering, physical attacks, or denial-of-service testing
  • Give us a reasonable opportunity to investigate and address the issue before public disclosure

We appreciate good-faith reports and will respond based on the issue’s impact and urgency.

security.txt

Our machine-readable vulnerability reporting information is available at:

Contact

The Service is operated by Proof Required s.r.o., Company ID (IČO) 300 03 474.

General inquiries: info@cvealert.io
Security reports: security@cvealert.io