Datum poslednjeg ažuriranja: 2026-05-17
Ova Politika Security & Responsible Disclosure („Politika“) odnosi se na sve veb-sajtove, aplikacije, API-je, poddomene, mobilne aplikacije, infrastructure, digital products i povezane servise koji posluju pod VIDI brendom, uključujući ali ne ograničavajući se na *.vidi.one (zajedno: „Platforma“).
Sva lica koja komuniciraju sa Platformom radi security research, vulnerability reporting, testing ili related activities potvrđuju prihvatanje ove Politike.
1. Svrha Politike
VIDI podržava responsible security research i encourages good-faith reporting legitimate security vulnerabilities koje mogu uticati na confidentiality, integrity ili availability Platforme.
Ova Politika uspostavlja:
•
responsible disclosure expectations;
•
permitted i prohibited testing activities;
•
security communication standards;
VIDI zadržava pravo da modify, suspend ili terminate ovu Politiku u bilo kom trenutku.
2. Scope
Ova Politika se odnosi na:
•
services operated under *.vidi.one.
Third-party services, providers, payment systems, cloud providers i external integrations mogu biti excluded from scope osim ako nije izričito drugačije navedeno.
3. Responsible Disclosure
Lica acting in good faith mogu prijaviti VIDI potential vulnerabilities.
Responsible disclosure obično znači:
•
avoiding harm users ili systems;
•
avoiding disruption services;
•
avoiding unauthorized access data;
•
avoiding privacy violations;
•
reporting findings privately;
•
omogućavanje reasonable remediation time before disclosure;
•
avoiding exploitation beyond what is necessary demonstrate issue.
Public disclosure pre remediation ili authorization može se smatrati unauthorized activity.
4. Prohibited Activities
Sledeće activities su strogo zabranjene bez explicit written authorization od strane VIDI:
•
denial-of-service attacks;
•
distributed denial-of-service attacks (DDoS);
•
excessive automated scanning;
•
exploitation vulnerabilities;
•
account takeover testing;
•
downloading user information;
•
bypassing authentication systems;
•
interfering infrastructure;
•
targeting third-party providers;
•
accessing financial systems;
•
accessing payment information;
•
accessing private communications.
Testing koje utiče na stability, performance, privacy, availability ili integrity Platforme može se smatrati unauthorized activity.
5. Automated Scanning Restrictions
VIDI može restrict ili prohibit:
•
automated credential attacks;
•
vulnerability enumeration;
VIDI zadržava pravo da block:
6. Reporting Vulnerabilities
Security vulnerabilities mogu se prijaviti na:
Reports treba da uključuju:
•
proof-of-concept details where appropriate;
•
responsible disclosure cooperation.
7. No Guarantee of Compensation
Bilo kakvi rewards, acknowledgments ili discretionary compensation mogu biti dodeljeni isključivo po nahođenju VIDI.
8. Enforcement Rights
•
preserve logs i evidence;
•
report activity providers ili authorities;
VIDI ima pravo da samostalno proceni da li activity prelazi granice authorized ili acceptable research.
9. No Authorization for Broader Activity
Ova Politika ne authorizes:
•
circumvention security measures;
•
testing against third-party providers;
Failure comply sa ovom Politikom može dovesti do:
10. Third-Party Systems
Certain Platform functionality može rely on:
•
third-party integrations.
Ova Politika ne daje authorization za testing, scanning ili targeting third-party systems.
Researchers su samostalno odgovorni za poštovanje:
11. Ograničenje odgovornosti
U maksimalnoj meri dozvoljenoj zakonom, VIDI nije odgovoran za:
Lica engaging in security research preuzimaju sve associated risks.
12. International Compliance
Researchers i users su samostalno odgovorni za poštovanje:
•
cybersecurity regulations;
Certain testing activities mogu biti prohibited u određenim jurisdictions.
13. Izmene Politike
VIDI može izmeniti ovu Politiku u bilo kom trenutku bez prethodnog obaveštenja.
Updated versions stupaju na snagu nakon publication Platform.
Nastavak interaction sa Platformom predstavlja acceptance updated versions.
14. Jezik
U slučaju neslaganja između prevoda, engleska verzija ima prioritet osim ako applicable law ne nalaže drugačije.
15. Kontakt informacije
Security Reports: security@vidi.one Legal Requests: legal@vidi.one Abuse Reports: abuse@vidi.one General Support: support@vidi.one