BENEERA

Security

Security & Vulnerability Disclosure

Last updated: November 15, 2026

BENEERA LLC wants its products to be safe for the people who use them. If you believe you have found a security vulnerability in any of our products or systems, please tell us. We will work with you to understand and fix it.

How to report

Email support@beneera.com with the subject line "Security report". Please include:

  • The affected product, URL or app version.
  • A description of the issue and its potential impact.
  • Steps to reproduce, and a proof of concept if you have one.
  • How you would like to be credited, if at all.

Our machine-readable contact details are published at /.well-known/security.txt.

In scope

  • beneera.com
  • Encrivo VPN: encrivo.com and the iOS and Android apps
  • pdf.xyz
  • isitdownorme.com
  • innoreviews.com
  • tuberepeat.app
  • pomostride.com
  • PrintScale Studio (github.com/baki2222/printscale-studio)

Third-party services we use (for example Cloudflare, Apple, Google or our hosting providers) are out of scope. Please report issues in them to the vendor directly.

Please do not

  • Run denial-of-service tests, load tests or automated scans that degrade service for other users.
  • Access, change or delete data that is not yours. Use your own test accounts, and stop as soon as you have shown the issue.
  • Use social engineering, phishing or physical attacks against our staff, users or providers.
  • Share details of a vulnerability publicly before we have had a reasonable chance to fix it.

What you can expect from us

  • We aim to acknowledge your report within 3 business days.
  • We will keep you updated as we investigate and fix the issue.
  • We will credit you publicly once the issue is fixed, if you would like.

Safe harbour

If you make a good-faith effort to follow this policy, we will consider your research authorized, we will not pursue legal action against you, and we will not ask law enforcement to investigate you over it. If a third party takes legal action against you for research done under this policy, we will make it known that your actions were authorized.

We do not currently run a paid bug-bounty program.