Trust & transparency
Security and responsible disclosure
Last updated
If you think you have found a security vulnerability in anybanq.lk, please tell us. We take every report seriously and would rather hear about a problem from you than from someone who means harm. AnyBanQ is a comparison service, not a bank: we do not hold your money or see your bank accounts. For a problem with your bank account or card, contact your bank directly.
How to report
Email [email protected] with "Security report" in the subject. Please write in English if you can.
What to include
- The page or API address affected.
- The steps to reproduce the problem, with any request, script or screenshot that shows it.
- What you think someone could do with it.
- How we can reach you, and whether you would like to be credited.
Do not send anyone else's personal data. If you saw some, describe it rather than copying it.
Testing in good faith
Please only test in ways that cannot harm our visitors or the institutions we work with:
- Use your own accounts and your own data.
- Stop once you have proof. Do not open, change, download or keep data beyond the minimum needed to show the problem, and delete anything you did obtain.
- No denial-of-service, load or spam testing, and no automated scanning that floods the site.
- No social engineering or phishing of our team, partners or visitors, and no physical attacks.
- Do not test the systems of banks, finance companies or other third parties we link to.
- Give us a reasonable time to fix the problem before you tell anyone else about it.
What happens next
We will acknowledge your report within 3 business days, keep you updated while we look into it, and tell you when a confirmed problem is fixed.
We do not run a bug bounty programme and cannot promise a reward, but we are grateful for every report made in good faith.
Machine-readable contact details: /.well-known/security.txt. For anything else, see our contact page.