Vulnerability Disclosure Policy

We welcome security researchers and the community to report any vulnerabilities found in our systems. Your reports help us keep our services safe for everyone.

Scope

This policy covers vulnerabilities found in the following systems and services:

How to Report

Please send your vulnerability reports to: cibersecurity@ontinet.com

Include a detailed description and any steps to reproduce the issue.

What to Expect

We commit to acknowledging receipt of your report within 5 business days and will keep you updated on the remediation progress.

No Rewards Program

Note: We currently do not offer any rewards or bounty programs for vulnerability reports. Our goal is to maintain a safe environment through collaboration.

Responsible Disclosure

Please avoid activities that may cause harm, data loss, or disrupt service. Respect user privacy and do not exploit vulnerabilities beyond verification.

Thank you for helping us improve our security.