Skip to content
pentivex

Responsible Disclosure

Found a security issue in a Pentivex system? We want to hear about it.

Draft placeholder pending legal review.

How to report

Email contact@pentivex.com with a description of the issue, the affected system, steps to reproduce and any supporting evidence. Please do not include sensitive data beyond what is needed to demonstrate the issue.

Scope

This policy covers systems operated by Pentivex, including pentivex.com. It does not cover our clients' systems; report those to the client directly.

Please do not

Access or modify data that is not yours, degrade service availability, use social engineering or physical attacks, or publicly disclose an issue before we have had a reasonable opportunity to fix it.

Our commitment

We will acknowledge your report, keep you informed as we investigate, and credit you if you wish once the issue is resolved. We do not currently operate a paid bug bounty.