RIYADA / PEOPLE FIRST
Security & responsible disclosure
Report a website security concern responsibly and learn the boundaries of the public Yusr preview.
Website information · v0.1 · Updated
Scope of this website
The public preview does not accept payment cards, account passwords, file uploads or microphone recordings. No security certification, audit approval or Saudi-only residency is claimed. An illustrative screen is not evidence of a production control.
Report a concern responsibly
Email info@riyada.me with “Security report” in the subject, the affected URL, reproducible steps and impact. Use non-sensitive examples. Avoid accessing other people’s data, disrupting services or publishing private information. This is not a paid bug bounty program.
What remains before Yusr launch
App access control, encryption configuration, provider contracts, incident ownership, payment verification and deletion/backup tests require evidence before consumer release. Do not send secrets by email; ask us for an appropriate secure channel if one is needed.