Responsible disclosure
Responsible Disclosure Policy
We test other organisations for a living, so we welcome reports about our own systems. If you believe you have found a vulnerability, please tell us.
How to Report
Email info@cyberrguard.ai with the subject line "Security report". Include the affected URL or system, a description of the issue, steps to reproduce it, and its potential impact. Screenshots or a short video help.
Scope
- In scope: cyberrguard.ai and its subdomains operated by CyberrGuard.
- Out of scope: denial-of-service testing, social engineering of our staff, physical attacks, spam, and findings in third-party services we do not control.
Rules for Testing
- Only test what you need to demonstrate the issue, and stop once you have.
- Do not access, change or delete data that is not yours. If you reach personal data by accident, stop and tell us.
- Do not degrade our services or affect other users.
- Give us reasonable time to fix the issue before sharing it publicly.
Our Commitment
- We will acknowledge your report, keep you informed as we investigate, and tell you when it is fixed.
- If you follow this policy in good faith, we will not pursue legal action against you for your research, and we will treat your report as authorised.
- With your permission, we will credit you once the issue is resolved.
Our machine-readable contact file is published at /.well-known/security.txt.