Vulnerability Disclosure Policy

Reporting a security vulnerability

Mazepoint welcomes reports of suspected security vulnerabilities in our products, services, or infrastructure from customers, security researchers, and other third parties.

Please email security@mazepoint.com with a description of the issue, the product or URL affected, and steps to reproduce.

Please do not access, modify, or exfiltrate data beyond what is necessary to demonstrate the issue, and do not disclose the issue publicly until we have addressed it.

We will acknowledge your report within 2 working days, provide an assessment within 10 working days, and keep you informed of remediation progress. We do not operate a paid bug bounty programme, but we will credit reporters who wish to be named. We will not pursue legal action against good-faith research conducted within these guidelines.