Security and vulnerability disclosure

If you found a vulnerability in Tayra, please tell us first so that we can fix it before anyone uses it. The same contact is in /.well-known/security.txt.

How to report

Write to security@tayravpn.com, in English or Russian:

• what is affected and what someone could do with it;
• how to reproduce it, step by step;
• your name or nickname, if you want to be thanked.

What is in scope

• the website tayravpn.com;
• the account and its API, subscription links and subscription pages;
• the Telegram bot @tayravpn_bot and the Mini App;
• our VPN servers and, when they are released, our apps.

Please

• use only your own accounts and devices, and do not read, change or delete data of other people beyond what shows the issue;
• do not overload the service, do not send spam and do not use social engineering or physical access;
• give us time to fix the issue before you publish it.

What we do

We confirm that we got your report, keep you informed and tell you when the issue is fixed. There are no money rewards yet; with your consent, we thank you on this page.