Solutions
Vulnerability disclosure policy
How to report a security vulnerability to Jusoor Tech: scope, how to send it, testing rules and our commitment to reply within three working days.
Vulnerability disclosure policy
We welcome reports from security researchers about any vulnerability in our website or systems, and we treat them seriously and in confidence.
Scope
- The jusoor-tech.com website and its pages
- Our systems and products hosted on Jusoor Tech subdomains
How to report
Email info@jusoor-tech.com with the subject "Security report", and include the affected URL, the steps to reproduce and the likely impact. Our standard security contact file is at /.well-known/security.txt.
Testing rules
- No denial-of-service attacks or load testing
- No access to other people's data beyond what proves the issue
- No social engineering of our staff or customers
- No public disclosure before a fix and our agreement
Our commitment to you
- We acknowledge your report within three working days
- We tell you our assessment and the expected fix date
- We take no action against anyone who follows these rules in good faith