Security Policy

We take security seriously and appreciate the security research community's efforts to help keep our users safe.

Responsible Disclosure Policy

How to report security vulnerabilities

If you believe you've found a security vulnerability on banking.silvanode.com, we encourage you to let us know right away. We will investigate all legitimate reports and do our best to quickly fix the problem.

Report Security Issues

Please email security issues to:

info@silvanode.com

What to Include

Description of the vulnerability
Steps to reproduce the issue
Potential impact of the vulnerability
Any suggested remediation steps
Your contact information (optional)

Our Commitment to You

✓
Timely Response: We will acknowledge your report within 48 hours and provide an estimated timeline for a fix.
✓
No Legal Action: We will not pursue legal action against security researchers who follow this policy.
✓
Public Recognition: With your permission, we will publicly acknowledge your responsible disclosure on our security acknowledgments page.
✓
Transparent Communication: We will keep you informed of our progress in addressing the issue.

Responsible Disclosure Guidelines

Please follow these guidelines when testing

✓ Please Do:

Report vulnerabilities to us before disclosing them publicly
Make a good faith effort to avoid privacy violations and data destruction
Test only against your own accounts when possible
Give us reasonable time to respond before public disclosure

✗ Please Don't:

Access or modify data that doesn't belong to you
Perform denial of service attacks or load testing that could harm our services
Send phishing emails to our users or team
Publicly disclose vulnerabilities before we've had time to fix them
Exploit vulnerabilities beyond what is necessary to demonstrate the issue

Scope

What's included in this program

In Scope:

banking.silvanode.com and all subdomains
Cross-site scripting (XSS)
Cross-site request forgery (CSRF)
Server-side code execution
SQL injection
Authentication or authorization flaws
Significant security misconfigurations

Out of Scope:

Issues in third-party services (please report directly to them)
Social engineering attacks (phishing, vishing, smishing)
Denial of Service (DoS/DDoS) attacks
Content spoofing without security impact
Issues requiring significant user interaction or unlikely scenarios
Previously reported vulnerabilities (check our acknowledgments page)

Safe Harbor

When conducting vulnerability research according to this policy, we consider this research to be:

Authorized in accordance with the Computer Fraud and Abuse Act (CFAA)
Exempt from restrictions in our Terms of Service that would interfere with security research
Lawful, and we will not initiate or support legal action against you

If legal action is initiated by a third party against you for activities conducted under this policy, we will take steps to make it known that your actions were conducted in compliance with this policy.

Questions?

If you have questions about this policy or need clarification, please contact us at:

info@silvanode.com