Security Policy

Purpose

Pastores.com welcomes good-faith reports that help protect the portal and the people who use it. This policy explains how to report a potential vulnerability and what we expect during an investigation.

Scope

This policy covers pastores.com and web resources directly controlled by Pastores.com.

Third-party services, personal accounts, partner sites, and any system not operated by Pastores.com are out of scope. Report those findings to the applicable provider.

How to report

Send the report to hola@pastores.com. When possible, include:

1. the affected address or resource;
2. a clear description of the issue and its potential impact;
3. minimal steps to reproduce it;
4. evidence that does not expose personal data or secrets; and
5. a secure way to contact you.

Do not send credentials, complete personal data, malware, or information obtained from other people.

Good-faith research

To keep a report within this policy:

• avoid accessing, changing, downloading, or deleting data that does not belong to you;
• do not disrupt the service or perform denial-of-service testing;
• do not use social engineering, phishing, spam, or physical attacks;
• stop testing once you confirm the issue with the minimum necessary evidence; and
• allow reasonable time to investigate and fix the issue before public disclosure.

This policy does not create a reward, contractual relationship, or promise of payment.

Coordinated disclosure

Do not publish details that could enable abuse while the issue remains unresolved. If you wish to disclose the finding, coordinate with Pastores.com first to agree on a reasonable timeline based on the severity and complexity of the fix.

Other matters

This address does not replace emergency services and is not the channel for general support or questions about partner organizations. For those matters, use the contact channels published in the portal.