Security disclosure

How to report a suspected security issue in this site or in our products, and what this disclosure channel does and does not promise.

Reporting a security issue

The mailbox is a monitored corporate address and reports are reviewed.

The address or page affected, what you observed, and the steps that reproduce it.

What you expected to happen instead, and how you found it.

Please do not include personal data, credentials, or anything sensitive that the report does not need.

If the issue cannot be described without it, say so first and leave it out of the message.

This is a disclosure address, not a bug bounty. There is no reward programme and no safe-harbour undertaking.

No response time, remediation time or availability commitment is published here, and no certification or audit is claimed.

This channel covers this website and the software Palacios Software Group publishes.