Vulnerability Disclosure Policy

Introduction

This page explains how to report a security vulnerability you've found in hybytes.com or any other system we operate. We welcome reports from security researchers acting in good faith, and this page sets out how to report responsibly and what you can expect from us in return.

1. How to report

If you believe you have found a vulnerability, contact us with enough detail for us to reproduce the issue.

2. What we ask of you

Do not access, modify, or exfiltrate data belonging to others
Do not degrade the service
Do not use social engineering
Give us a reasonable period, at least 90 days, to remediate before any public disclosure

3. What you can expect from us

We will acknowledge your report within 5 working days, keep you informed of our progress, and will not pursue legal action against good-faith research conducted within this policy.

4. Bug bounty

We do not currently operate a paid bug bounty programme.

5. Machine-readable version

A machine-readable version of this policy is published at hybytes.com/.well-known/security.txt.