Responsible Disclosure

Domi Global Group takes the security of our website and the information entrusted to us seriously. We value the work of security researchers who help us identify and fix vulnerabilities, and we're committed to working with anyone who reports an issue in good faith.

This policy covers domiglobalgroup.com and any subdomains we operate. It does not cover third-party services we link to or rely on, such as our hosting provider's infrastructure — please report issues with those services directly to the provider responsible.

If you believe you've found a security vulnerability, email us at sales@domi-globalgroup.com with the subject line "Security Disclosure." Please give us a reasonable amount of time to investigate and address the issue before disclosing it publicly.

To help us reproduce and fix the issue quickly, please include: a description of the vulnerability and its potential impact, step-by-step instructions to reproduce it, any relevant URLs, screenshots, or proof-of-concept code, and the browser or tool you used to find it.

We'll acknowledge your report within 5 business days, investigate and validate the issue, and keep you reasonably informed of our progress toward a fix. Response and remediation times depend on the severity and complexity of the issue.

We will not pursue legal action against researchers who discover and report vulnerabilities in good faith, in accordance with this policy — provided you avoid privacy violations, data destruction, service disruption, and only interact with accounts and data you own or have explicit permission to test.

Please don't access, modify, or delete data that isn't yours, perform testing that could degrade the site's performance or availability (including automated scanning that generates significant traffic), or publicly disclose an issue before we've had a reasonable opportunity to address it.