Pass-Atlas
Security
Accounts and letters are guarded with captcha, throttles and same-site checks. Report a hole to [email protected] — do not post a working exploit.
What we run
Email sign-in and sign-up need a one-time visual captcha, lock after repeated failures, and use a honeypot against simple bots.
The contact form uses the same captcha plus a rate limit. Sessions ride HTTPS. Server functions check same-site requests to cut cross-site abuse.
What we ask
Use a password that is hard to guess. Do not post captcha screenshots in public. Visatu will not ask for your password by phone or chat.
Do not upload passport photos to our servers — the tools are built to stay on-device. If a page behaves oddly, stop and write to us.
Disclosure
Send security notes to [email protected] with steps to reproduce. We will treat them first. There is no bug-bounty promise.