Vulnerability Disclosure Policy (VDP) & security.txt
Safe harbour guidelines for security researchers reporting potential vulnerabilities in HackGuardX's own infrastructure.
- Legal safe harbour under the UK Computer Misuse Act 1990 for good-faith security research following this policy.
- 24-hour acknowledgement SLA and 7-day triage target for valid vulnerability reports.
- Dedicated security contact: security@hackguardx.com.
1. Commitment to Good-Faith Security Researchers
As a cybersecurity company, we value the independent security research community. If you discover a security vulnerability in hackguardx.com or the HackGuardX platform, we encourage you to report it to us responsibly.
Provided you comply with the scope and rules in this policy, HackGuardX will not initiate legal action against you under the UK Computer Misuse Act 1990 or claim breach of our Terms of Service.
2. Rules of Engagement & Scope
When conducting research, please adhere to these boundaries:
- •Do not access, modify, or download data belonging to any other HackGuardX user or organisation (create your own free test account).
- •Do not perform denial-of-service (DoS), social engineering, physical security testing, or automated high-volume scanner floods.
- •Send a detailed reproduction report to security@hackguardx.com and allow us reasonable time to remediate before public disclosure.
3. Response Timeline Commitments
We acknowledge receipt of all vulnerability reports within 1 business day, provide an initial triage assessment within 5 business days, and keep you updated through remediation and public credit (if desired).