Responsible disclosure

OVERVIEW

Reporting vulnerabilities

Send reports to mail@deepburg.com with subject “Security”. This policy does not authorize access to third-party data, social engineering, denial of service, physical attacks or testing outside systems you own or are explicitly authorized to assess.

• Identify the affected system and reproducible steps
• Provide only the minimum evidence required
• Do not modify, download or publish data
• Allow reasonable time for validation and remediation