Reporting a security issue

If you think you've found a security vulnerability in this website or in one of our apps, please tell us privately first. Email contact@mirageinteractive.uk with "Security report" in the subject.

What to include

• What you found and why it matters.
• Steps to reproduce it, or a proof of concept.
• The affected URL, or the app, platform and version.
• How you'd like to be credited, if at all.

In scope

• mirageinteractive.uk and its subdomains.
• The current released versions of our apps: WearKeeper, MervanIQ, VorselunIQ, AmporIQ, WakeAuditIQ and MailPackIQ. Other apps come into scope when they're released.

Google Play, the Microsoft Store, Cloudflare and other third-party services we use are run by those companies; please report issues in them to the company concerned.

Please don't

• Access, change or delete data that isn't yours.
• Run denial-of-service, load or spam tests.
• Use social engineering or phishing against anyone, or physical attacks.
• Run destructive or automated tests that degrade the service for others.
• Disclose the issue publicly before we've had a reasonable chance to investigate and fix it.

What you can expect

We aim to acknowledge a report within five working days, keep you updated while we investigate, and tell you when it's fixed.

We don't run a paid bug bounty.

Machine-readable contact details: /.well-known/security.txt. For help using our apps, see support.