Reporting a security problem

Last updated: September 26, 2026

If you've found a security problem in AURA ENGINE (good.psyoptin.com), thank you. Please tell us before anyone else,

so we can fix it.

How to report: email security@psyoptin.com with what you found, the page or address involved, and the steps

to see it. A person reads every report, usually within two days.

Please:

• test only what you need to show the problem, and stop there;
• never read, change or delete other people's data, and never keep any you see by accident;
• never disrupt the site for others (no floods, no load tests, no spam through our forms or email);
• give us a reasonable time to fix it before you share it publicly.

In return: if you act in good faith and follow these rules, we won't pursue or report you for the research, and

we'll credit you on this page if you'd like. We're a small project, so there's no cash bounty.

Out of scope: reports from automated scanners with no real-world impact, missing "best practice" headers with no

exploit, social engineering of people, and physical attacks.