# Welcome to our Security.txt Page! # We're delighted to see you here. Your presence on our Security.txt page shows that you care about security, # and that's something we truly value. This file is a testament to our commitment to maintaining a safe and secure # environment for patient and care team. If you've found something that needs our attention or have any security # concerns, you're in the right place. Feel free to reach out and let us know how we can work together to make # Divar even safer. # Thanks being a part of our security community! Contact: https://bugbounty.sotoon.ir/en Contact: mailto:bugbounty@divar.ir Preferred-Languages: en, fa Acknowledgments: https://bugbounty.sotoon.ir/app/leaderboard/list Policy: https://divar.ir/bugbounty-en Policy: https://divar.ir/bugbounty Policy: https://bugbounty.sotoon.ir/ # Policy is based on CVSS3 Expires: 2026-04-01T00:00:00z # No legal action will be taken against you if your approach is benevolent and complies with the following conditions : # - You didn't exploit, and you will not exploit vulnerability found ; # - You do not, and will not, engage in system testing/research with the intent to harm divar, its customers, employees, partners or suppliers ; # - You have not used, misused, deleted, altered or destroyed, and you will not use, misuse, delete, alter or destroy any data you have accessed or may access in connection with the vulnerability and/or error discovered ; # - You didn't lead and you will not lead types attacks like social engineering, phishing, ddos or data leak ; # - You didn't test, and you will not test the physical protection of divar ; # - You have not and will not violate any applicable laws in connection with your report ; # - You are agree not to disclose to any third party any information relating to your report, the vulnerabilities and/or errors reported, or the fact that a vulnerability and/or error has been reported ; # - We do not guarantee that you will receive a response to your report. We will contact you regarding your report only if we deem it necessary. # - You are agree that you make your report without any expectation or requirement of reward or other benefit, financial or otherwise, for making such report. # If you want report us any vulnerability on our website, you can contact us with the contact details. -----BEGIN PGP PUBLIC KEY BLOCK----- mQMuBGd1NAcRCADvNItVfTyfIcC7nLWLS0+eXft6HHFeS84HHJXaLTJQYtx/aBTt NBBTCwfQ4jrb597OTM2Zepfo/RaWk/iWq9yDMljG0gdSQygxbuWZbFjOS4IqD4M/ qtQ9/d2YtA/rOyhSrpE8pe8meiN78g2y4OMvmDZkhix8hhl+p1r7Q7j74mK6cJOt d8PwAq60lcWwuHAOaCe/vlAoFDAK/7/OdxD7TAqo640VFxz/gLB3ikkp8xs4J9Hp IVWcld/mjVJJpxKv/GWxvvmE5G59U5S5hs+te/qcjvzy7q9f6BOvhzySyAGVwHeZ yPn6azJxZSEAqVDxJ3gXDPFu7L+AH6ZAAaRfAQCkl4acEaJuDs3LMoX+33pAe4al neOBR1iZpsehaUEPDQgAsj9y09FynIZtugWUUdW8xkC0B2Tqms1Ms8skbb7KErlZ mDtamCPtnh8vFoSmayzS54Bg59dct0iiz2UTcgPlIy3g59vjiqyfOtv2UnhL8csh nPlz/0emibHWnm5w8UF+0J0XhVymjgyY+pVNllbJd4UblFejlLB7CFvBkWRGRxVg 8OQnJzhCcOSuykwVpxPBeHo6DToYzi2/1i92bycm1lN9QFJ2P8vytNRgXNEc+WCm y0qK2Zw5nqMaWVa4lEIdpbroV8usIVlsSB/Z7QSXswLOlVDyrzY3QfOWEVkl4zMs YnsyAnmW9qkHbCs1E52IjPEQ7MYh1qZVllUHLcN0/AgA5SA1mFa05nciWfuHUn/P 092bLtkS0ebdtGkCBUkJDNqIZfzz89RgAwLQbY7BbIaCML5of9thkAZbJDDOmJTC BnGE6eNsIVj+/ruLbaZZ7m5tDikg3JlMnsJbhtZHm7jieZJ7OQvpO4dDhwH1nAkt ACS9r2sl/8hASIYU6B231gXgTqmm1dZw5tN1yscouJ008LK6176tutbpRGv2WfLL gq2/lFCC0DC0afIXRv/RlvceeT4tOwzlFiHecnUOgf7lfjTDDIR36zpjQryT9CBY 5dVXcfZ3p4ba+sCM4QkHBQ9rrMsgaufS3LGwmZQ64WlfWKwQ4DNIn6+PrN4HxVbD 1LQkZGl2YXIgYnVnYm91bnR5IDxidWdib3VudHlAZGl2YXIuaXI+iJYEExEIAD4W IQRHgQw66u8IfKnchCsFGdRT73VYIAUCZ3U0BwIbAwUJAlejrwULCQgHAgYVCgkI CwIEFgIDAQIeAQIXgAAKCRAFGdRT73VYIAEWAP9Fz2fdJ7idT7y+y5XVCROLyoBO Nw3A/9J5dtLnI3kedQD8D13Vhys88IWmEeDKiCljlDlNh6oprN53ifPcjmulJ7K5 Ag0EZ3U0BxAIAKawBw1l4fxbcYaHNyuDLaHNsEZmUDtNNxobK0OsOKSnS6wY+0rq fzERbD5QhADN3Tpmbg4Z87p7BuU9rfL6rzRHTPoYuygci7PotDE3GARnRfwRqVBP T5qiZGu87YKjMDL7crdOARhrdxYT7tqvax/vTnyKUc0m0OqKgvZMUmQzG6NF8fCC 2jBTnFmDoMGujPvzFZukt0rBlRgHlA/sW/Bgj9oaiQ78wVOU8WsCMqytknwEYHKq 9mrZ+PgjiAVnGEkEvXDHhoFIRW8nH84EaJG5KBbCRwQj3P2OAE6cW13NFEktfJPd e4sOS+1N5kpCdMC5LOJjCOnsCDLdPn7PsI8AAwcH/iI3sanoLGclkUmpr/SOJNZ3 SJjGYY5esMsvjzYaKbzmtNJqomNHGdXirgw20PONAc+JF3AEuTk/XezJpMKUL0qP CptLpjPsqgt9mmMM3GbTUe+HoJgr+qlI6PvVctbwvbEVMV5mNji24PGL1z5+LXaD LcNtSYt7KLZDVqGHjV4vccRzddU7PJDYo5cuhvkDVEMN/wewlZj7Xv/xMwF85p4J +QmqGVWPy/inqBwk2NxaPALWIA29JFx1bByRK49iGlT7Ez2G57D7SmmogLbUqeA/ uTvj0VsqZXfoXwgXy9sg4JUWr6UYb4Kt3U1SGUtSu6l6fPAcJk6orfomCfqZ90OI fgQYEQgAJhYhBEeBDDrq7wh8qdyEKwUZ1FPvdVggBQJndTQHAhsMBQkCV6OvAAoJ EAUZ1FPvdVggsl0A/0n2J/pQ3mg77mDsWovpikWZAdVQHMo/ZZucWksxDmsDAP9C NM2YC4azJdGQeRQWurPJ/gVC7q8qXlKzPjUFvlofDw== =2dlv -----END PGP PUBLIC KEY BLOCK-----