Security at Persia Money

Persia Money takes the security of our services, systems and customer information seriously.

If you believe you have discovered a security vulnerability affecting Persia Money, please report it to: security@persia.money

Responsible Disclosure

We welcome responsible security research and ask researchers to:

• Provide sufficient information for us to understand and reproduce the issue.
• Avoid accessing, modifying, downloading or deleting customer data.
• Avoid disrupting our services or affecting other users.
• Avoid denial-of-service, social engineering, phishing or physical security testing.
• Give us reasonable time to investigate and remediate an issue before publicly disclosing it.

In Scope

Security reports relating to systems and services operated by Persia Money, including:

• persia.money
• api.persia.money
• admin.persia.money

Other Persia Money-owned systems may also be considered where clearly associated with our services.

Out of Scope

Please do not perform:

• Denial-of-service or load testing
• Social engineering or phishing
• Automated testing that generates excessive traffic
• Physical security testing
• Attempts to access or modify another customer’s information
• Destructive testing

Reports concerning missing security headers or general best-practice recommendations without a demonstrable security impact may be treated as informational.

Reporting

When reporting a vulnerability, please include:

• The affected URL or system
• A description of the vulnerability
• Steps required to reproduce it
• The potential security impact
• Any relevant screenshots or technical evidence

We will review legitimate security reports and respond as appropriate based on severity and impact.

Thank you for helping us keep Persia Money and our customers secure.