Standards
Vulnerability Disclosure Programme
Our Vulnerability Disclosure Programme gives security researchers a route to report vulnerabilities so they can be acknowledged, investigated and fixed.
Reported vulnerabilities are acknowledged, investigated and addressed. Report them with the form on this page.
- Test only against accounts and data you own, or have permission to use.
- Do not access, change or delete other people’s data. If you reach data that is not yours, stop and report it.
- Do not run denial-of-service tests, spam, social engineering or physical tests against Computle, its staff or its customers.
- Keep the details confidential until we confirm the issue is fixed.
Out of scope
Section titled “Out of scope”- Minor issues that pose no meaningful risk to our systems or data.
- Issues that relate to a customer’s own use of Computle, such as their own workstation configuration.
- Reports produced only by automated scanners, with no demonstrated impact.
What to include
Section titled “What to include”- The system or URL affected.
- Steps to reproduce, with the requests or payloads you used.
- What an attacker could do with it.
Report a vulnerability
Section titled “Report a vulnerability”When you send the form, you receive an email with a reference. To add detail later, send the form again and quote the reference.