We welcome reports from security researchers and customers. If you believe you have found a vulnerability, please tell us privately so we can fix it before it is disclosed.
How to report
E-mail security@cloudvision360.com with:
- the affected product, URL or component,
- steps to reproduce, and the impact you observed,
- your name or handle if you would like to be credited.
Our machine-readable contact details are published at /.well-known/security.txt.
What to expect
- Acknowledgment within 3 business days.
- An initial assessment within 10 business days.
- Updates at least every 14 days until the issue is resolved.
- Credit in our acknowledgments, if you want it, once a fix is released.
Scope
In scope: the CloudVision360 and ITOps360 applications, their APIs, collectors and agents, and this website.
Out of scope: denial-of-service testing, social engineering, physical attacks, reports from automated scanners without a demonstrated impact, and third-party services we use.
Safe harbour
If you act in good faith, follow this policy, avoid privacy violations, data destruction and service disruption, and give us reasonable time to fix an issue before disclosure, we will not pursue legal action against you for your research.
Please test only against your own accounts or the public demo environment, and never access, change or delete other customers’ data.