Reporting security issues

If you found a security issue in our shop, please tell us. We look at every report and fix the issue as fast as we can.

How to report

Email info@autotools.ee with the subject “Security”. Describe what you found, on which page and how to reproduce it. A screenshot or a short video helps.

What we promise

• We confirm we got your report within three working days and tell you when the issue is fixed.
• If you researched in good faith and followed the rules below, we won’t go to the police or to court over it.
• If your report helps us fix the issue, we may thank you with a discount code.

Please don’t

• place orders or make payments: every order is a real order and reaches our books;
• open, change or delete other customers’ data. If you come across someone else’s data, stop and tell us straight away;
• run automated scanners or load the shop with requests;
• try to trick our staff or customers;
• publish the issue before we have fixed it or 90 days have passed.

What we don’t count as a security issue

• missing security headers or SPF, DKIM and DMARC records, without an example of how to exploit it;
• clickjacking on pages with nothing sensitive on them;
• software version numbers and automated scanner output without a verified example.

Wrong price, description or picture? Tell us on the product page, under the description: “Spotted a mistake in the product info?”