> ## Documentation Index
> Fetch the complete documentation index at: https://docs.simen.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

# Responsible Disclosure

<Info>
  Hey there, security enthusiasts! At simen.ai, we're absolutely passionate about keeping our users' data safe and sound. We love hearing from our amazing community when you spot something that might need our attention - you're our security superheroes!
</Info>

## How to report an issue

Found something interesting that's in-scope? Awesome! Here's how you can let us know:

<CardGroup cols={2}>
  <Card title="Email Report" icon="envelope">
    Drop us a line at **[hi@simen.ai](mailto:hi@simen.ai)** with all the juicy details!
  </Card>

  <Card title="GitHub Issue" icon="github">
    Head over to our dedicated security playground: [simen-ai/simen-bug](https://github.com/simen-ai/simen-bug) and create an issue there!
  </Card>
</CardGroup>

### Required Information

For either method, we'd love to see:

<Steps>
  <Step title="Summary">
    A clear summary of what you found and why it matters
  </Step>

  <Step title="Reproduction Steps">
    Step-by-step instructions to reproduce the issue (screenshots are your friend!)
  </Step>

  <Step title="Environment Details">
    Your environment details - OS, browser, device, the whole shebang!
  </Step>

  <Step title="Proof of Concept">
    If you're feeling fancy, some proof-of-concept code would be amazing!
  </Step>
</Steps>

<Tip>
  Once we get your report, our security team will jump into action! We'll keep you in the loop about our progress and might ping you for more details if needed.
</Tip>

### Rewards & Recognition

<Info>
  And here's the fun part - we absolutely believe in rewarding awesome work! If your finding has a **CVSS** score of 4 or higher and it's something we haven't seen before, you're guaranteed some sweet financial compensation! 💰
</Info>

For all other original reports, we'll definitely consider them, and rewards could range from getting featured on our security hall of fame to cold hard cash!

## Scope

### What's fair game? ✅

<CardGroup cols={2}>
  <Card title="Main Website" icon="globe">
    **[https://simen.ai](https://simen.ai)**
  </Card>

  <Card title="Case Platform" icon="briefcase">
    **[https://case.simen.ai](https://case.simen.ai)**
  </Card>

  <Card title="API Services" icon="code">
    **[https://api.simen.ai](https://api.simen.ai)**
  </Card>

  <Card title="Mobile & Extensions" icon="mobile">
    simen.ai mobile apps and browser extensions
  </Card>
</CardGroup>

### What's off-limits? ❌

<Warning>
  The following activities are strictly prohibited and will not be eligible for rewards:
</Warning>

<AccordionGroup>
  <Accordion title="Automated Testing">
    * Automated scanning tools (let's keep it personal!)
    * Brute force attacks (we like finesse!)
  </Accordion>

  <Accordion title="Social Engineering">
    * Social engineering our lovely team members
    * Attacks requiring physical access to someone's device
  </Accordion>

  <Accordion title="Service Disruption">
    * DDOS attacks (please don't break our stuff!)
    * Denial of service attacks (we need to stay online!)
  </Accordion>

  <Accordion title="Low Impact Issues">
    * Clickjacking on boring pages with no sensitive stuff
    * Theoretical attacks that can't actually be exploited
  </Accordion>
</AccordionGroup>

## Guidelines

<Warning>
  Please follow these important guidelines when testing:
</Warning>

<Steps>
  <Step title="Test Responsibly">
    Please test on your own account first! If you need to test on someone else's, make sure you have their explicit permission
  </Step>

  <Step title="Respect Data">
    Don't copy or mess with our production data - we need that stuff!
  </Step>

  <Step title="Maintain Service">
    Keep our services running smoothly - no breaking things please!
  </Step>

  <Step title="Follow Policies">
    Stay within the bounds of our privacy policies and terms (boring but important!)
  </Step>

  <Step title="Responsible Disclosure">
    Keep your discovery under wraps until you've told us and we've had time to fix it - we promise we'll work fast!
  </Step>
</Steps>

<Tip>
  Happy hacking! 💚
</Tip>