Security - Responsible disclosure
We test other people's systems for a living. We welcome reports about ours.
How to report
Email security@wardkeylabs.com with a description, steps to reproduce and any evidence. Our machine readable contact is at /.well-known/security.txt.
What we commit to
- An acknowledgement within two business days.
- Updates until the issue is fixed.
- Credit, if you want it, once the issue is resolved.
Safe harbor
We will not pursue legal action against research that is in good faith, avoids privacy violations and service disruption, and gives us reasonable time to fix the issue before disclosure.
Out of scope
Denial of service, social engineering of our staff, physical attacks, and systems that belong to our clients.