Responsible Disclosure Policy
Last updated: March 2026
1. Purpose
CYBER TEC ASSISTANTS LTD values the security research community and encourages responsible disclosure of security vulnerabilities. This policy outlines how to report security issues.
2. Scope
This policy applies to:
- Our web applications and services
- Our infrastructure and systems
- Any security vulnerabilities that could affect our customers
3. Reporting a Vulnerability
To report a security vulnerability:
- Provide detailed information about the vulnerability, including steps to reproduce
- Allow reasonable time for us to address the issue before public disclosure
- Do not exploit the vulnerability beyond what is necessary to demonstrate it
- Do not access, modify, or delete data belonging to others
4. Our Commitment
We commit to:
- Acknowledge receipt of your report within 5 business days
- Provide an estimated timeline for addressing the issue
- Keep you informed of our progress
- Credit you for the discovery (if desired) when we publicly disclose the issue
5. Safe Harbor
We will not pursue legal action against researchers who follow this policy and act in good faith. We consider security research conducted under this policy to be authorized.
6. Out of Scope
The following are out of scope:
- Social engineering attacks
- Denial of service attacks
- Physical security issues
- Issues in third-party services we do not control
7. Contact
To report a security vulnerability:
CYBER TEC ASSISTANTS LTD
71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ