Skip to content
Experiencing a breach? Get help now
Cyberphore
Services
Industries
Locations
Resources
Company
Talk to an expertExperiencing a breach?

Security

Responsible disclosure.

We practise what we preach. If you believe you have found a vulnerability in a Cyberphore system, we want to hear from you.

How to Report

Email security@cyberphore.com with:

  • a description of the issue and where it is (URL, system or component);
  • steps to reproduce it and any proof of concept;
  • the potential impact as you understand it;
  • how we can contact you, and whether you would like to be credited.

Our machine-readable contact details are published at /.well-known/security.txt. If you are reporting an active attack against a Cyberphore client, call our 24/7 incident line at +1 236 665 1165.

Scope

In scope: cyberphore.com and its subdomains, and other systems operated by Cyberphore Inc.. Out of scope: systems belonging to our clients or technology partners. If you find an issue in a partner's product, please report it to that vendor directly. Findings with no realistic security impact, such as missing best-practice headers on non-sensitive pages, may be noted but are unlikely to be treated as vulnerabilities.

Our Commitments

  • We will acknowledge your report and keep you informed of our progress.
  • We will investigate in good faith and work to fix confirmed issues promptly.
  • We will credit you, with your permission, once the issue is resolved.

Safe Harbour

If you make a good-faith effort to follow this policy, we will consider your research authorized, we will not pursue legal action against you, and we will not ask law enforcement to do so in relation to that research. If a third party brings a claim related to research that followed this policy, we will make it known that your activities were authorized. This commitment applies only to Cyberphore Inc. and its own systems.

Please Do Not

  • access, modify, download or delete data that does not belong to you, beyond the minimum needed to show the issue;
  • run denial of service, spam, phishing, social engineering or physical tests;
  • use automated scanning that degrades the service for others;
  • keep any personal information you come across; delete it and tell us in your report;
  • publicly disclose the issue before we have had a reasonable chance to fix it.

We do not currently offer monetary rewards for reports.

Book free assessment