Responsible disclosure

Security

costico.eu and OpenCall are built and operated by COSTICO SRL, Timișoara, Romania. We take the security of our platforms and of the data our users entrust to us seriously.

Security contact

Costin Bleotu

Founder & CTO, COSTICO SRL

contact@costico.eu

Reporting a vulnerability

If you believe you have found a security vulnerability in costico.eu, OpenCall (opencall.ro) or any other COSTICO SRL product, please email contact@costico.eu with a description of the issue, the affected URL or component, and the steps needed to reproduce it. We will acknowledge your report, keep you informed while we investigate, and let you know when it is fixed.

Please give us a reasonable amount of time to address the issue before disclosing it publicly, and avoid accessing or modifying data that does not belong to you, degrading service availability, or social engineering. We will not pursue action against researchers who report in good faith and follow these guidelines.

Scope

  • costico.eu

    Company website

  • opencall.ro

    OpenCall — a COSTICO SRL product

Machine-readable contact details: /.well-known/security.txt