Reporting a security problem

AcademHep holds students' project work, personal details and payment records, so we take reports of security weaknesses seriously. If you have found one, please tell us before telling anyone else, and give us a fair chance to fix it.

How to report

Write to security@academhep.com. Tell us:

• the page or address where you found the problem;
• the steps that show it, in enough detail for us to repeat them;
• what you think someone could do with it.

Please do not send passwords, card details or other people's personal information by email. If you need to show us something sensitive, say so and we will arrange how.

What we ask of you

• Use only accounts you created yourself. Do not open, change or delete another person's work, messages or files.
• Stop as soon as you have shown the problem exists. Do not copy data out to prove the point.
• Do not run tests that slow the site down or flood it with requests or sign-ups, and do not send messages to our users.
• Do not try to deceive our team, our mentors or our students into giving you access.
• Give us reasonable time to fix the problem before you describe it publicly.

What you can expect from us

• We will confirm we have your report within three working days.
• We will tell you whether we could repeat the problem and what we plan to do.
• We will not take legal action against you, or ask anyone else to, for research that follows this page.
• If you would like it, we will thank you by name once the problem is fixed.

We do not run a paid reward scheme.

Not a security report?

If your own account has been taken over, or you cannot log in, write to support@academhep.com from the email address on the account. Payments are handled by Paystack, and we never see or store card numbers.