Security
Responsible disclosure helps protect readers and the newsroom systems behind Plainly Pakistan.
Report a vulnerability
Email [email protected] with a clear description, affected URL or component, and steps to reproduce. Do not include real credentials or personal data of third parties.
Scope
- Public website and discovery surfaces
- Authentication and private dashboard boundaries
- Data isolation between public projections and private records
Social engineering of individuals, physical attacks, and denial of service against third parties are out of scope.