// SECURITY POLICY

Responsible disclosure, with a 48-hour response commitment.

If you discover a vulnerability in our systems, report it to mail@se4ko.com. We will work with you to address it responsibly and credit your contribution.

DOWNLOAD PGP KEY

VULNERABILITY REPORTING

Send findings to mail@se4ko.com. Encrypt sensitive detail with our PGP key before transmitting.

Response time< 48 hours
ConfidentialityGuaranteed
RecognitionPublic credit

OUR COMMITMENT

We answer every security report within 48 hours and work actively to resolve issues as quickly as possible, keeping you informed throughout remediation.

Transparency100%
CommunicationActive
ResolutionPriority

RECOGNITION

We thank every researcher who helps us improve our defences. See who has contributed on our Hall of Fame.

Public recognitionAvailable
Monetary rewardsAvailable
Hall of Fame listingLive

SECURE COMMUNICATION

Encrypt sensitive reports with our PGP key to guarantee confidential disclosure.

PGP key ID0x5E4K-0C0D-3F1D-9A77
Symmetric cipherAES-256
DigestSHA-256

DOWNLOAD KEY

SECURITY SCOPE

This policy covers the following assets and vulnerability classes.

SE4KO web applications and servicesIn scope
Public-facing infrastructureIn scope
Client-side security vulnerabilitiesIn scope
Authentication and authorisation flawsIn scope
Data exposure and privacy issuesIn scope

FOUND SOMETHING?

Help us maintain the highest security standards by reporting vulnerabilities responsibly.