At Ecrio, we are committed to keeping our systems, network and product(s) secure. Despite the measures we take, the presence of vulnerabilities will always be possible. When such vulnerabilities are found, we’d like to learn of them as soon as possible, allowing us to take swift action to shore up our security.
Ecrio’s Responsible Disclosure Policy allows for researchers / hackers to search for vulnerabilities, as long as you don’t:
Breaching the above restrictions may result in Ecrio launching an investigation and/or taking legal action to the rights of Ecrio or that of our partners and customers.
Please read the guidelines carefully before attempting discovery and submitting any reports. We reserve the right to not respond to bug reports that clearly are defined as out of scope.
If you do discover a vulnerability, please contact us as soon as possible by sending an email to firstname.lastname@example.org with the subject line “Vulnerability Disclosure”
What we ask of you:
What we promise:
The following template can be used when submitting a vulnerability:
[Description of the identified vulnerability]
# Steps to reproduce
[What could an attacker achieve by exploiting the vulnerability]
Any report submitted in relation to this Responsible Disclosure Policy will be handled with great care with regards to the privacy of the reporter. We will not share your personal information with third parties without your permission, unless we are legally required to do so.