Legal
Security and disclosure
How to report a vulnerability, what happens after you do, and what we commit to in return. Report privately, by email.
No version of this document is in effect yet. Its full text is being finalized and will be published here.
Sections
- Scope: the sites and services this covers
- How to report, and what to include
- Our response, and when you hear from us
- Remediation dates, and what we do if we cannot meet one
- Safe harbour for good-faith research
- Out of scope, and why
- Credit, at the reporter's choice
Contact
Questions about this document go to support@veramast.com, the contact of record for Veramast.