Security
At Wiredcraft, security matters to us.
We build and operate digital products and services, and we want to make sure the systems and services we own or operate are handled responsibly.
We appreciate responsible reports from security researchers, customers, and members of the security community who believe they have found a vulnerability affecting a Wiredcraft-owned or Wiredcraft-operated system or service.
If you believe you have found a security issue, please contact us at:
Please include:
- What you found
- Safe steps to reproduce the issue
- Affected URLs, IPs, APIs, systems, or services
- Screenshots, logs, or proof of concept if available
- Your contact details so we can follow up if needed
If you encounter sensitive data while validating an issue, please stop testing immediately. Do not access, copy, download, retain, disclose, or share the data. Instead, describe the type of data exposed without including the data itself in your report.
Responsible Disclosure
We ask that you:
- Act in good faith
- Only test as much as needed to reasonably confirm the issue
- Stop testing once the issue has been confirmed, especially if sensitive data, customer data, or service impact is encountered
- Do not access, copy, modify, download, delete, retain, disclose, or share data that does not belong to you
- Avoid disrupting services or impacting customers
- Give us reasonable time to investigate and address the issue before public disclosure
What We’re Not Asking For
Please don’t:
- Run denial-of-service tests
- Perform automated high-volume scanning, brute-force testing, credential stuffing, or large-scale fuzzing
- Use social engineering, phishing, or physical attacks
- Test customer systems, third-party systems, or systems that are not owned or operated by Wiredcraft, or that you do not have permission to access
- Perform activities that violate applicable laws
How We Handle Reports
When we receive a report, we will review it, validate the issue where possible, and prioritize remediation based on severity, exploitability, customer impact, and business risk.
The amount of detail we can share may depend on the nature of the issue, customer confidentiality obligations, legal requirements, and internal security considerations.
Rewards
We do not currently operate a public bug bounty program and cannot guarantee financial rewards for vulnerability reports.
We may choose to recognize helpful, valid, and responsibly disclosed reports at our discretion.
Contact
Questions or vulnerability reports:
Thanks for helping us keep Wiredcraft, our customers, and our community secure.