Found a security issue? Please tell us.

How to report

Email security@deployworks.co with a description of the issue, the steps to reproduce it, and the impact you think it has. We aim to acknowledge reports and keep you informed of progress.

Scope

This policy covers deployworks.co and its subdomains. Systems belonging to our clients are out of scope. If you've found an issue in one of those, report it to the organisation concerned.

Please don't

• Access, change or delete data that isn't yours
• Run denial-of-service tests, social engineering or physical attacks
• Use automated scanners that generate large volumes of traffic
• Disclose the issue publicly before we've had a reasonable time to fix it
• Keep or share any data you come across beyond what's needed to show the issue

Safe harbour

If you make a good-faith effort to follow this policy, we'll treat your research as authorised and won't bring a claim or complaint against you over it. We can't give that assurance on behalf of third parties, such as our hosting provider. If you'd like to be credited for the report, tell us how you'd like to be named.

Machine-readable contact details are at /.well-known/security.txt.