# Security and vulnerability reporting | 4Ys AI Solutions

Source: https://4ys.org/security

# Security

4Ys AI Solutions · Muscat, Sultanate of Oman · Last updated: 8 October 2026

Legal, privacy and security: [admin@4ys.org](mailto:admin@4ys.org)

[العربية](/ar/security)

## Security

-   Client systems run on infrastructure managed by 4Ys, with each client's data kept separate from every other client's. We control their configuration, security and updates (clause 3).
-   Every client system is backed up automatically every day (clause 6).
-   Clients keep their own login credentials secure and tell us at once about any suspected incident (clause 11).
-   This website is served over HTTPS only.
-   A client can move its deployment to its own infrastructure; clause 5 sets out who is responsible after handover.
-   We use industry-standard security measures. No system is completely immune, and we say so plainly (Privacy Policy, clause 4).

## Reporting a security issue

-   Found a security weakness in this website or in a system we run? Write to [admin@4ys.org](mailto:admin@4ys.org) with what you found and how to reproduce it.
-   Please don't access, change or keep data that isn't yours, don't degrade the service for anyone else, and give us reasonable time to fix the issue before you tell anyone.
-   Good-faith research within these rules is welcome.
-   Our security contact is also published in the standard place: /.well-known/security.txt.