Security Disclosure Policy
Brightsec Corp welcomes good-faith reports of security vulnerabilities in our public systems.
How to report
Email mpicasso@bright-sec.com with the affected URL, a clear description, and enough detail to reproduce the issue. Do not include sensitive personal data unless necessary for the report.
Scope and conduct
Please avoid service disruption, social engineering, physical intrusion, credential attacks, and access to data that is not yours. Do not publicly disclose a potential issue before Brightsec Corp has had a reasonable opportunity to investigate and address it.
We will acknowledge reports and work to evaluate them in good faith.