Responsible Disclosure
Policy.
We value the contribution of security researchers. If you find a vulnerability in a DataKobi system, we ask that you report it in line with the principles below.
Safe harbor
We will not take legal action against researchers who follow this policy in good faith, for activities related to the vulnerability they report.
Principles
Minimum access
Use only the access needed to confirm the vulnerability. Do not view, modify or delete data.
Service continuity
Do not run DoS attacks or other activity that could disrupt service, and stay within the defined scope.
Responsible disclosure
Give us a reasonable time, preferably 90 days, to assess and fix the issue before you disclose it publicly.
Sensitive information
Mask personal and sensitive data in evidence or proof of concept, and share only what is needed for verification.
How to report
Include the affected asset, the steps to reproduce, masked evidence or a proof of concept, and the expected impact. You can send your report through our contact form. If possible, encrypt sensitive technical details with PGP.
Reporting process
- We acknowledge your report within 3 business days.
- Our technical team assesses its impact and scope.
- A fix is planned and applied.
- With your permission, we may thank or credit you.