On this page

In Summary

Aurelo Technologies welcomes responsible, good-faith security research that helps improve the security of the Anchor platform. This policy explains how to report potential vulnerabilities, what researchers can expect from us, and the activities that are considered in and out of scope.

Purpose
Scope
Good-Faith Research
Reporting a Vulnerability
What to Include
Our Response Process
Safe Harbor
Out of Scope
No Bug Bounty
Coordinated Disclosure
Recognition
Contact
Related Documents

1. Purpose

The purpose of this policy is to encourage the responsible reporting of security vulnerabilities so they can be investigated and remediated before they can be exploited.

2. Scope

This policy applies to public-facing services operated by Anchor and Aurelo Technologies.

3. Good-Faith Research

Researchers should:

Avoid disrupting services.
Avoid accessing unnecessary data.
Respect user privacy.
Stop testing once sensitive data is encountered.
Report findings promptly.

4. Reporting a Vulnerability

Send reports to:

security@technologies.aurelo.cc

Please encrypt sensitive information where practical.

5. What to Include

Include:

Description of the issue
Steps to reproduce
Affected URLs or endpoints
Potential impact
Proof of concept (if available)
Suggested remediation (optional)

6. Our Response Process

Anchor aims to:

Acknowledge reports.
Assess severity.
Investigate the issue.
Remediate confirmed vulnerabilities.
Communicate progress where appropriate.

Response times may vary depending on complexity.

7. Safe Harbor

We will not pursue legal action against researchers who:

Act in good faith.
Follow this policy.
Avoid privacy violations.
Do not disrupt services.
Do not exploit vulnerabilities beyond what is necessary to demonstrate the issue.