Security disclosure policy
We welcome responsible reports of security issues affecting G Smart Developer properties, including gsmart.dev, gsmartapp.com, gsmartsolution.com, gsmartgo.com, kanismart.com, and gsmart-services.com.
Contact
What to include
- Affected URL / product and a clear description of the issue
- Steps to reproduce (proof-of-concept preferred)
- Impact assessment if known (data exposure, auth bypass, RCE, etc.)
- Your contact details for follow-up
Our commitments
- Acknowledge receipt within 3 business days
- Keep reporters informed of remediation progress
- Do not pursue legal action against good-faith research that follows this policy
Please do not
- Access, modify, or delete other customers’ data
- Perform denial-of-service or social-engineering attacks
- Publicly disclose before we have had a reasonable time to patch
This page is the canonical policy referenced by /.well-known/security.txt.
