Responsible Disclosure
Responsible Disclosure
Effective Date: April 25, 2025
Cyber.Irish is committed to maintaining the security of our systems and safeguarding client data. We welcome responsible security researchers to report potential vulnerabilities in a safe, coordinated, and respectful manner.
1. Reporting a Vulnerability
If you believe you have discovered a vulnerability in any of our systems, services, or applications, please report it promptly by emailing [Loading email...].
2. What You Can Expect
- Initial acknowledgment within 5 business days
- Thorough investigation and validation of the reported issue
- Timely resolution or mitigation of confirmed vulnerabilities
3. Guidelines for Responsible Reporting
- Avoid accessing, modifying, or deleting data you do not own.
- Do not perform actions that may impact the availability of our services.
- Report the issue privately and avoid public disclosure until it is resolved.
- Comply with all applicable laws and avoid violating user privacy.
4. Scope and Out of Scope Issues
While we welcome reports, low-impact informational findings may be considered out of scope unless you can demonstrate significant real-world impact.
5. Safe Harbor
We support good-faith security research. If your report follows the guidelines of this policy, we will not pursue legal action against you for your responsible disclosure.
6. Contact
For all responsible disclosure inquiries, email us at [Loading email...].