Responsible disclosure
Found a vulnerability in our systems?
We take the security of our own systems seriously and welcome reports from researchers acting in good faith.
How to report
Email info@vsitsecurity.com with a description of the issue, the affected URL or system, and steps to reproduce.
Our commitment
- We will acknowledge your report within three business days.
- We will keep you informed of our progress towards a fix.
- We will not pursue legal action against good-faith research that follows this policy.
Please do not
- Access, modify or delete data that is not yours.
- Run denial-of-service, spam or social engineering tests.
- Test systems belonging to our clients — this policy covers only systems we operate for ourselves.
- Publicly disclose an issue before we have had reasonable time to fix it.