Security
Effective date: 25 October 2026 · Last updated: 25 October 2026
We take the security of AI Vision Audit and the stores our customers trust us with seriously. If you find a security problem, please tell us and give us a fair chance to fix it before telling anyone else.
How to report
Email security@aivisionaudit.com with:
- what you found and where (the page, the address or the API endpoint);
- the steps to reproduce it, and what an attacker could do with it;
- how to reach you, if you'd like us to keep you updated.
We'll confirm we have your report within 3 working days, keep you told as we work on it, and let you know when it's fixed. Please don't share the details publicly until then.
In scope
- www.aivisionaudit.com and the app behind it (the dashboard, reports, sign-in and billing pages);
- its API (everything under www.aivisionaudit.com/api).
Out of scope
- denial-of-service or load testing, and anything that degrades the service for others;
- social engineering or phishing of our team or customers, and physical attacks;
- other people's accounts or data: use only accounts you own, and stop and tell us if you reach anyone else's data;
- the services we use (such as our hosting, payment and email providers): please report those to them directly;
- automated scanner output without a working example of the problem.
Our promise
If you act in good faith (you stay within this page, avoid harming our customers and their data, and give us time to fix the problem), we won't pursue legal action against you or ask anyone else to, and we'll treat your report as authorized research.
Rewards
We don't run a paid bug bounty yet. We're glad to thank you by name when the fix is out, if you'd like.