Security
Security Policy
How to report a security issue in our public websites, and what to expect from us.
Scope
This policy covers our public websites: seampire.com, www.seampire.com, and coffee.seampire.com. Anything not listed here is out of scope.
How to report
Found something? Email us directly:
lnjsz@qq.comPlease include the affected URL, steps to reproduce, the impact you believe it has, and a way to reach you.
Our commitment
We welcome good-faith security research. If you follow this policy — testing only the sites in scope, avoiding privacy violations and service disruption, and giving us reasonable time to respond — we will not pursue legal action against your research.
What to expect
We aim to acknowledge reports within a few business days. We do not promise a fixed response time, but we take every credible report seriously and will keep you informed as we investigate.
Out of scope
- Denial-of-service or volumetric testing
- Social engineering, phishing, or physical attacks
- Automated scanner output without a demonstrated impact
- Missing best-practice headers without an exploitable path
- Issues in third-party platforms we do not operate
Recognition
We do not run a paid bug bounty. With your permission, we are happy to credit meaningful reports publicly.