SpellQuiz Security

Our approach to security

SpellQuiz maintains application-security practices covering secure development, authentication and authorization, vulnerability remediation, infrastructure, and protection of user data.

Application security

Security work includes secure code review, access-control and authorization review, vulnerability identification and remediation, and validation of security fixes.

Security contact

Yusif Najafli — Product Engineer

Yusif coordinates application-security activities for the SpellQuiz platform, including vulnerability review, security testing, access-control review, remediation, and security-related engineering issues.

Report a security issue

For security-related reports, contact: yusif@spellquiz.com

Machine-readable contact details are published at /.well-known/security.txt.

Responsible disclosure

We ask security researchers not to access or modify other users' data, disrupt the service, or perform destructive testing. We will review legitimate vulnerability reports and work to remediate confirmed issues.