Security

Security questions and responsible reporting.

Security reports are reviewed through a durable role-based contact path so buyers, researchers, and operators know where to send them.

Last reviewed: March 26, 2026.

Security contact: john@vantageciso.com

Reporting Guidance

Provide reproducible details, affected URL or component, and the observed impact.
Do not include sensitive personal data in report submissions.
Do not run denial-of-service, social engineering, or destructive tests.
Allow reasonable time for triage and remediation before public disclosure.

For full expectations, see our Vulnerability Disclosure page.