Security
Security and vulnerability disclosure.
We build security software. If you find a vulnerability in VxSure or this website, we want to hear from you.
How to report
Email [email protected] with "Security" in the subject line.
Include:
- the affected product version or URL;
- a description of the issue and its impact;
- steps to reproduce, with proof-of-concept code or screenshots if available;
- how you would like to be credited, if at all.
What we commit to
- We will acknowledge your report and keep you informed as we investigate.
- We will work with you on a disclosure timeline once a fix is available.
- We will credit you publicly if you wish, once the issue is resolved.
Scope
In scope
- The VxSure appliance and built-in console.
- vxsure.com and docs.vxsure.com.
Out of scope
- Partner-operated deployments you do not own. Report those to the partner, or to us with the partner's permission.
- Denial-of-service testing, social engineering, physical attacks and spam.
- Reports from automated scanners without a demonstrated impact.
Good-faith research
If you act in good faith, avoid privacy violations and service disruption, do not access or keep data beyond what is needed to demonstrate the issue, and give us reasonable time to fix it before disclosure, we will not pursue or support legal action against you for your research.
Machine-readable contact
Our contact details are also published at /.well-known/security.txt.
Contact: mailto:[email protected]
Expires: 2027-10-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://vxsure.com/.well-known/security.txt
Policy: https://vxsure.com/security