Report a security issue

Last updated: September 2026

Reporting a vulnerability

If you find a security problem on akashop.store, email support@akashop.store with the subject "Security" and enough detail to reproduce it: the URL, the steps, and what you were able to see or do. We read every legitimate report and answer within two working days.

What we ask

• Give us a reasonable time to fix the issue before you publish it.
• Do not access, change or delete data that is not yours, and stop as soon as you have enough to prove the issue.
• No denial of service, spam, social engineering of our staff or customers, or physical attacks.
• Test only against your own account and your own orders.

If you follow these rules we will not pursue legal action over your research.

What we usually do not treat as a vulnerability

• Missing security headers, cookie flags or TLS configuration with no demonstrated impact.
• Reports produced only by an automated scanner, without a working proof of concept.
• Rate limiting on public pages, version disclosure, or issues that need a fully compromised device.

Reward

We are a small shop and we do not run a paid bounty programme. For a valid report with real impact we offer public credit on this page if you want it, and a store voucher.