Policy
Vulnerability disclosure
We test other people's systems for a living, so we welcome reports about ours.
How to report
Email contact@janussecurity.org with a description of the issue, steps to reproduce and any proof-of-concept.
What to expect
- Acknowledgement within one business day.
- An initial assessment and next steps within five business days.
- Credit, if you want it, once the issue is resolved.
Scope
This policy covers janussecurity.org and systems operated by Janus Security Solutions, LLC. It doesn't cover our clients' systems. Report those to the vendor directly.
Safe harbor
We won't pursue legal action against good-faith research that follows this policy. That means you avoid privacy violations, data destruction and service disruption, only access what you need to demonstrate the issue, and give us reasonable time to fix it before disclosing publicly.
Machine-readable contact: /.well-known/security.txt