Security Policy

This English text is provided for convenience. If it differs from the Italian version at codalma.it/security-policy/, the Italian text prevails.

At Codalma we take the security of our applications and infrastructure seriously. We welcome responsible disclosure of any vulnerability or unusual behaviour that could affect the integrity or confidentiality of our services.

How to report a vulnerability

If you think you have found a security problem, please contact us privately by email at info@codalma.it.

• Please do not disclose the vulnerability publicly before it has been fixed.
• Give us enough detail to reproduce and confirm the problem.
• Include a proof of concept or screenshots where you can.

Response times

We aim to reply to every report within 5 working days, and to keep you updated until the problem is resolved.

Credit

We value the help of the community in keeping our systems secure. Where possible we will publicly thank researchers who contribute responsibly to the security of Codalma.

Last updated: 11 October 2025