Responsible Disclosure
Discover → Validate → Report → Remediate → Disclose
We follow responsible and coordinated vulnerability disclosure practices. When we identify a previously unknown vulnerability, we work with affected vendors to validate the issue, coordinate remediation, and support appropriate public disclosure.
- 01
Discover
- 02
Validate
- 03
Report
- 04
Remediate
- 05
Disclose
Vendors and researchers can reach us through the contact page. Public advisories appear only after this sequence, or when a vendor explicitly permits earlier notice.
Contact usEngage
Put your controls under test.
Tell us what needs to be validated. We reply with scoping questions, rules of engagement, and an NDA before any testing.