Effective date: September 8, 2026 | Last updated: September 8, 2026
HostMamma welcomes good-faith reports concerning HostMamma-controlled systems. This policy is not authorization to test an upstream provider, cloud platform, customer system, or other third-party service.
Scope
Only public HostMamma-owned web properties and applications that HostMamma directly operates are in scope. Provider storefront, account, cart, checkout, DNS, hosting infrastructure, cloud platforms, customer systems, and third-party applications are out of scope unless the owner gives separate written authorization.
Safe testing rules
- Avoid privacy violations, persistence, social engineering, denial of service, spam, physical testing, and access beyond the minimum needed to demonstrate an issue.
- Do not modify, delete, download, retain, or disclose another person’s data.
- Stop and report immediately if sensitive information is encountered.
- Use only accounts and data you own or have explicit permission to test.
- Do not publicly disclose a suspected vulnerability before a reasonable opportunity to investigate and address it.
How to report
Use the HostMamma contact page, choose technical support, and include “Security Report” in the subject. Provide the affected URL, issue type, reproduction steps, impact, and supporting evidence with sensitive data removed. Do not submit active exploit code, credentials, or customer data through an ordinary form.
What to expect
HostMamma will acknowledge and triage good-faith reports as resources permit, may request more information, and may coordinate remediation and disclosure. This policy does not promise a reward or immunity for unlawful conduct and cannot bind third parties or law-enforcement agencies.
Provider-fulfilled products
Domains, hosting, email, security, and related products fulfilled through the upstream product-provider storefront are governed by the current agreements presented for the customer’s market, product, account, and checkout. Those provider agreements control for provider-fulfilled products if they conflict with a general summary on HostMamma.com.
- HostMamma Universal Terms of Service
- HostMamma Global Privacy Notice
- HostMamma Legal Agreements
- HostMamma Refund Policy for Provider-Fulfilled Products
- HostMamma Privacy Choices for Provider-Fulfilled Products
Contact HostMamma
Questions, requests, or reports concerning this policy may be submitted through the HostMamma contact page. Choose the topic that best matches your request so it can be routed appropriately.
