SecuProbe
SYSTEMS OPERATIONAL — All security modules running

Responsible Disclosure Policy

Last updated: March 9, 2026

1. Introduction

At SecuProbe, security is central to our mission. We appreciate the efforts of security researchers who help identify vulnerabilities responsibly and contribute to improving the security of our platform.

This Responsible Disclosure Policy explains how security researchers can report vulnerabilities in SecuProbe services and how we handle those reports.

2. Scope

This policy applies to vulnerabilities discovered in:

  • The SecuProbe platform (web application and dashboard)
  • The SecuProbe API
  • Official SecuProbe domains such as: secuprobe.io, app.secuprobe.io, api.secuprobe.io

This policy does not apply to vulnerabilities affecting third-party services integrated with SecuProbe unless the issue directly impacts the SecuProbe platform.

3. How to Report a Vulnerability

If you believe you have discovered a security vulnerability, please report it by sending an email to: security@secuprobe.io

For sensitive reports, a PGP key is available upon request at the same address.

Your report should include:

  • A detailed description of the vulnerability
  • Steps required to reproduce the issue
  • A proof of concept (PoC), if possible
  • The potential impact of the vulnerability
  • Your contact information

Providing clear reproduction steps helps us resolve issues faster.

4. Responsible Research Guidelines

We ask researchers to follow these principles when testing SecuProbe systems:

  • Only test assets that are in scope
  • Do not access, modify, or delete data belonging to other users
  • Do not disrupt the availability of the platform
  • Avoid automated scanning that may degrade service performance
  • Do not perform social engineering, phishing, or physical attacks against SecuProbe employees or infrastructure

Security testing must remain non-destructive and respectful of user privacy.

5. Our Commitment

When you report a vulnerability responsibly, SecuProbe commits to:

  • Acknowledge receipt of your report within 72 hours
  • Investigate the issue and validate the vulnerability
  • Keep you informed about the progress of remediation
  • Target resolution within 90 days for critical vulnerabilities, and 30 days for moderate severity issues
  • Credit researchers who discover valid vulnerabilities in our Hall of Thanks (unless anonymity is requested)

SecuProbe does not currently offer financial rewards. We do offer public recognition for any valid vulnerability reported responsibly.

6. Safe Harbor

SecuProbe will not pursue legal action against researchers who:

  • Follow this Responsible Disclosure Policy
  • Act in good faith to avoid privacy violations, service disruption, or data destruction
  • Report vulnerabilities promptly after discovery

We consider such research to be authorized security testing under this policy.

7. Public Disclosure

We ask researchers to refrain from publicly disclosing vulnerabilities until the issue has been resolved or SecuProbe has provided authorization for disclosure. Coordinated disclosure helps protect users and ensures vulnerabilities are addressed responsibly.

8. Contact

For vulnerability reports or security concerns: security@secuprobe.io