Vulnerability Reporting Form for Spica International d.o.o. Solutions

Spica encourages the responsible disclosure of security vulnerabilities in its products and services.
Please do not publicly disclose the vulnerability until it has been reviewed and remediated.
Acknowledgement of receipt: within 5 business days.
Estimated time to initial severity assessment: 10 business days.
The program currently does not include financial rewards (bug bounty) – this may be added later as a separate decision.