Responsible Disclosure

Last updated: August 16, 2026

If you believe you have found a security vulnerability affecting CyberAutophagy systems, websites, or client-facing infrastructure operated by us, we appreciate responsible reporting.

Scope

This policy applies to CyberAutophagy-owned websites and infrastructure. It does not authorize testing of client environments, third-party services, or systems outside our control.

Please Do

• Report issues promptly with enough detail to reproduce the issue
• Give us reasonable time to investigate and remediate before public disclosure
• Make a good-faith effort to avoid privacy violations, service disruption, and data destruction

Please Do Not

• Access, modify, or exfiltrate data that is not your own
• Use denial-of-service attacks, social engineering against staff, or physical intrusion
• Test client systems or third-party services without explicit authorization

How to Report

Send vulnerability reports through our Contact page with the subject "Responsible Disclosure" and include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Your contact information

What to Expect

We will acknowledge receipt within a reasonable timeframe, investigate in good faith, and coordinate disclosure timing with you when appropriate. We do not currently operate a public bug bounty program.