Security and responsible disclosure

Report a suspected vulnerability in siexpo.bg to [email protected] with the subject “Security Report — SIExpo”.

What to include

Provide the affected URL, observed behaviour, expected outcome and minimal reproduction steps. Include only redacted evidence. Do not send passwords, keys or other people's personal data; first request a suitable way to share sensitive information.

Testing boundaries

Do not carry out denial-of-service attacks, bulk scanning, access to other people's records, data modification or testing of third-party providers. Stop testing and report accidental access. This page does not grant general intrusion authorisation or legal immunity.

Handling reports

FalcoSoft reviews submitted reports. For confirmed issues we coordinate the required correction and public description with the reporter. There is no announced cash bounty programme or guaranteed response time.

Machine-readable contact: security.txt. Editorial complaints: Reports and abuse.

Updated: 12 October 2026.