Movahedi Solutions

Report a Security Issue

Use this form to report a security issue on movahedi.ca only. Do not test client systems or other parties' systems. Do not include client confidential material in your report. Reports go to mohammad@movahedi.ca. No bounty is offered unless separately approved and funded. See Responsible Disclosure for scope, what to include, and how reports are handled.

Last updated: October 27, 2026
Responsible Disclosure
Security Practices

How this form works. On submit, the form builds a structured email to mohammad@movahedi.ca from the fields below, and opens your own email program with that subject and body ready to send. You review the email and send it. Nothing is sent by the site itself until you send that email. This design does not include a server-side form handler, a database, a ticket system, or a confirmation receipt sent by the site. If you have no email program configured, the mailto step will not complete, and you should instead send the same structured details directly to mohammad@movahedi.ca. This form does not accept file uploads. A reporter who has a screenshot that shows only the public movahedi.ca page and the issue itself may attach it to the email after the mailto step opens, before sending, at their own choice. No phone number and no postal address are included in this form. They are not needed for a report, so they are left out.

What was observed * (Required)

Describe the issue in plain terms, and what you expected to happen instead. Include only what you actually observed.

Page affected * (Required)

The full page address on movahedi.ca where the issue was seen, for example https://movahedi.ca/example-page

Steps to reproduce (Optional)

List the steps you took, in order, so the issue can be repeated. Leave blank only if the issue is fully described in What was observed.

Date and time observed * (Required)

When you observed the issue.

Time zone * (Required)

The time zone for the date and time above, so the report can be matched to site activity.

Contact for follow-up * (Required)

An email address where we can reach you with questions about this report. Used only for follow-up on this report.

Confirmation * (Required)

I confirm that this report does not include client confidential material, material from another party's system, credentials, tokens, private keys, or personal information about anyone other than the contact address above.

If this confirmation is not true for your report, remove the material before submitting, or do not submit. See Responsible Disclosure for what not to include.

Additional evidence notes (Optional)

Short notes about evidence, such as what a screenshot would show. Do not paste credentials, tokens, private keys, or client confidential material here. This form does not accept file uploads.

Scope and limits, stated briefly

This form does not store reports on the site, does not create a ticket, a case number, or a tracking reference, does not send a confirmation receipt, does not accept file uploads, and does not promise an acknowledgement time, a fix date, or a bounty. Contact: mohammad@movahedi.ca.

Related pages

Scope and limits, stated briefly