Information Security & Vulnerability Reporting

Our measures

• Full TLS encryption with HSTS.
• A strict content security policy and blocking embedding of the site in external frames.
• Regular updates of software libraries and review of known vulnerabilities.
• No keys or secrets stored in browser code.

Reporting a vulnerability

If you discover a security vulnerability, email info@azl.com.sa with the subject “Security vulnerability”, including a description and reproduction steps. We acknowledge receipt within 3 business days.

Please do not exploit the vulnerability, access other people's data or disrupt the service, and do not disclose it publicly before it is fixed. Our security.txt file is available at /.well-known/security.txt.