Security disclosure
We welcome reports from security researchers. If you find a vulnerability in phpsafe.cloud or PHP Safe Guard, please tell us privately first.
Last updated: 2026-10-22
How to report
Email mediastarkang@gmail.com with a short description, the steps or a minimal proof of concept to reproduce it, and the impact you expect. Please do not open a public GitHub issue for security problems.
Scope
In scope: phpsafe.cloud and the PHP Safe Guard source code, including Shield bypasses. Out of scope: denial of service, spam, social engineering and reports from automated scanners without a demonstrated impact.
Our commitment
We reply within 72 hours, keep you updated while we fix the issue, and credit you in the release notes if you wish. We will not take legal action against research carried out in good faith under this policy.
Please
Do not access or change other people's data, do not degrade the service, and give us a reasonable time to fix the issue (normally up to 90 days) before disclosing it publicly.
Machine-readable policy
Our contact details are also published in the standard format at /.well-known/security.txt.