Please do not report security vulnerabilities through public GitHub issues, discussions, or social media.

Instead, email us at support@branta.pro.

To help us triage and resolve the issue quickly, please include:

• A description of the vulnerability and its potential impact
• Step-by-step instructions to reproduce the issue
• The affected version(s) of the Branta SDK, your platform, and implementation details
• Any proof-of-concept code, logs, or screenshots (please redact any sensitive credentials)
• Whether the issue has been disclosed anywhere else

• We will acknowledge your report as soon as possible and keep you informed as we investigate
• We will work with you to understand and validate the issue
• Once a fix is released, we are happy to credit you for the discovery if you would like

We ask that you give us a reasonable amount of time to address the issue before any public disclosure.

Reports of particular interest include:

• Authentication bypass or privilege escalation
• Exposure of sensitive data or credentials
• Remote code execution vulnerabilities
• Payment transaction handling flaws
• Privacy leaks or data exposure issues
• Vulnerabilities in Branta infrastructure that users depend on

Issues in third-party dependencies should be reported upstream to the respective projects, though we appreciate a heads-up if Branta is affected.