Security policy
If you think you have found a security problem in any Sawa site or app, please tell us. We read every report.
How to report
Write to security@sawacenter.com in English or Arabic. Say what you found, where, and the steps to see it again. Screenshots help.
Please do not put patient or trainee information in the report. If you came across someone's data, say so, and do not keep a copy.
What we ask
Test only with your own account. Do not read, change or delete other people's data, do not slow the service down for others, and do not try social engineering on our staff, patients or trainees.
Give us a reasonable time to fix the problem before you tell anyone else.
What we promise
We reply within 5 working days, keep you told while we fix it, and do not take legal action against research done in good faith under this policy.
Where it applies
sawacenter.com, clinic.sawacenter.com, training.sawacenter.com, dashboard.sawacenter.com and the Sawa API. Payment pages hosted by Kashier and video rooms hosted by the meeting provider belong to them; report those problems to them as well.
Thanks
We thank everyone who reports a real problem and, if they wish, list their name here once it is fixed. Sawa does not run a paid bug bounty.
No reports yet.