Reporting a security issue
Report a security issue to support@vyera.ai with what you found and how to reproduce it.
If you find a security issue in Vyera, reporting it directly is the fastest way to get it looked at.
Gather the details
Note what you found and, where possible, the steps to reproduce it. A clear reproduction is the single thing that most speeds up a fix.
Send it to support@vyera.ai
Describe the issue and include the steps. Do not include any data you obtained through the issue beyond what is needed to demonstrate it.
Give us a chance to fix it before disclosing
We will work with you on timing rather than treating a report as an accusation.
What happens next
The team reviews security reports directly. Support is provided by email during UK business hours and we respond as soon as reasonably practicable, as set out in section 17 of our Terms.
Vyera does not currently publish a committed acknowledgement or response time for security reports, and does not operate a paid bug bounty programme. We would rather state that than imply a commitment we have not made.
If it involves personal data
Where an issue amounts to a personal data breach affecting Customer Personal Data, our notification obligation to affected customers is within 72 hours of becoming aware of it, as set out in section 8 of our Data Processing Agreement.
What it does not do
Reporting a security issue is not the route for a data accuracy problem, such as a competitor's price showing incorrectly. See Report a data accuracy issue for that.
It is also not the route for account access problems. See I cannot sign in.
Was this useful?
Related articles
- How we secure your data
Your data is encrypted in transit and at rest, and access is restricted on a least-privilege basis. Vyera holds no independent security certification.
- Report a data accuracy issue
Send the team the competitor, source and field that looks wrong so it can be checked directly.
- I cannot sign in
Check your work email is correct and that the sign-in code has not expired before contacting the team.
- Our data processing agreement
Vyera's DPA is published at vyera.ai/dpa and is incorporated into the Terms automatically, so there is nothing to sign.
Still stuck?
Send this to the team and we will pick it up.