Reporting security vulnerabilities
Our Commitment to Security
At Vidoc Security, we take the security of our systems and our users' data seriously. We appreciate the security research community's efforts in helping us maintain a secure environment.
If you believe you have discovered a security vulnerability in our systems, we encourage you to report it to us responsibly. We are committed to working with security researchers to verify and address any potential vulnerabilities.
How to Report a Vulnerability
Please send your findings to security@vidocsecurity.com. When reporting, please include as much information as possible to help us understand and reproduce the issue.
What to Include in Your Report
- A clear description of the vulnerability
- Steps to reproduce the issue
- Affected URLs, parameters, or components
- Potential impact of the vulnerability
- Any proof-of-concept code or screenshots
- Your contact information for follow-up
What to Expect
- We will acknowledge receipt of your report within 3 business days
- We will investigate and validate the reported vulnerability
- We will keep you informed of our progress
- We will notify you when the issue has been resolved
Guidelines
We ask that you:
- Do not access, modify, or delete data that does not belong to you
- Do not perform actions that could harm the availability of our services
- Do not disclose the vulnerability publicly until we have had a reasonable time to address it
- Act in good faith to avoid privacy violations and disruption to others
Safe Harbor
We consider security research conducted in accordance with this policy to be authorized. We will not pursue legal action against researchers who report vulnerabilities in good faith, following the guidelines above.
We value your contribution to improving the security of our systems and thank you for helping us protect our users.
Contact
For any questions regarding this policy or to report a vulnerability, please contact us at security@vidocsecurity.com.