Security
How to tell us about a security flaw in Rota Nacional and what we do with the report.
How to report
- Write to eu@wendelmaques.com with the affected address, the steps to reproduce and the impact.
- Send only the minimum proof, without other people's data.
- The same contact is in the domain's /.well-known/security.txt file.
What we do
- We confirm receipt within 5 business days.
- We fix first what exposes personal data, accounts or payments.
- We tell you when the fix is live.
Testing rules
- Test only with your own account or with accounts you created for the test.
- Do not access, change or delete other people's data.
- Do not run denial of service, spam, social engineering or physical tests.
- Stop testing and tell us as soon as you confirm the flaw.
Good faith
- If you follow these rules and tell us before disclosing, we will not take legal action because of the test.
- We ask for up to 90 days to fix before any public disclosure.
- We do not run a cash reward program.
Last updated: October 19, 2026.