Security
Report a security issue
Found a vulnerability in the Cynorida website or a service we run? Tell us privately so we can fix it before anyone else finds it.
How to report a vulnerability
Send a description of the issue, the affected URL or service and the steps to reproduce it. The disclosure policy lists everything a useful report contains.
- Machine-readable contact
- /.well-known/security.txt
What happens after you report
These are the commitments in our disclosure policy. Good-faith research within that policy is authorised.
- Within 3 business days
We acknowledge your report
We reply to confirm that we have your report and are looking at it.
- Within 10 business days
We send an initial assessment
We triage the issue, tell you whether we can reproduce it, and keep you updated while we fix it.
- Agreed with you
We disclose together
We agree the timing of any public disclosure with you, and credit you if you would like us to.
Security contact
Security reports to Cynorida go to security@cynorida.com and are handled under our disclosure policy.
- Named contact
- security@cynorida.com
Report an active incident
If an attacker is in your systems right now, do not use the vulnerability route. Our contact page has the fastest way to reach our incident responders.