VGVEXLORGRID

Security

Report a vulnerability.

We want security weaknesses reported without putting users, data or systems at additional risk.

How to report

Email accounts@vexlorgrid.com with the subject SECURITY VULNERABILITY. Include the affected surface, reproduction steps, impact, screenshots or logs that do not expose another person's data, and your preferred contact details.

Do not

  • access, copy or retain another person's data;
  • perform denial-of-service, destructive or persistence testing;
  • social-engineer users or service providers;
  • publish a vulnerability before there has been a reasonable opportunity to investigate and mitigate it;
  • assume a bug bounty, payment, testing authorisation or legal safe harbour that has not been expressly agreed in writing.

Response

Reports are triaged according to observed impact and evidence. Acknowledgement of a report is not itself confirmation that a vulnerability exists.