Commitment to Security
"At SEC 23Lab, the safety of our users and data is our top priority. We believe that working with skilled security researchers across the globe is crucial in maintaining a secure environment."
Reporting Guidelines
Security researchers should provide a detailed summary of the vulnerability, including steps to reproduce, impact, and a proof-of-concept (PoC). We encourage researchers to use our encrypted reporting form.
Safe Harbor
We will not take legal action against researchers who comply with this policy and perform their research in an ethical manner. This includes not impacting user data or service availability.
Responsible Disclosure
We ask that you give us a reasonable amount of time (minimum 90 days) to investigate and remediate an issue before making any information public. Cooperative disclosure ensures user safety.
Out of Scope
- Denial of Service (DoS) attacks.
- Social engineering or phishing.
- Physical security tests.
- Automated scanning against non-test assets.