Responsible Disclosure
Last updated
We welcome good-faith security research. If you believe you’ve found a vulnerability in a Jasbasoft website, application or product, please tell us privately so we can investigate and fix it.
How to report
- Report via the contact form, marked “Security disclosure”.
- Include enough detail to reproduce the issue: affected URL or product, steps, and impact.
- Give us reasonable time to investigate and remediate before any public disclosure.
What to expect
- An acknowledgement of your report.
- An assessment and, where confirmed, a remediation timeline.
- A notification when the issue is resolved.
Testing boundaries
Testing must be limited to what is necessary to demonstrate the issue: do not access, modify or delete data that isn’t yours, disrupt services, or run automated scans that degrade availability. Contact us to agree the scope before carrying out active testing. This page does not authorise testing third-party systems.
Recognition
With your permission, we credit researchers who report valid issues. We do not currently operate a paid bounty programme.