SECURITY · RESPONSIBLE DISCLOSURE
Found something?Tell us.
We’re a security company; we hold our own work to the standard we’d want. If you’ve found a vulnerability in zpetal, we want to hear about it and we’ll work with you to put it right.
Report in good faith
Email contact@zpetal.com with enough detail to reproduce the issue: steps, impact, and anything that helps us confirm it. Give us reasonable time to respond before disclosing publicly, and avoid privacy violations, data destruction, or service disruption while testing.
We respond and remediate
We acknowledge reports, keep you updated as we investigate, and fix confirmed issues promptly. We’re glad to credit researchers who want it, and to coordinate timing on disclosure.
Safe harbor
Research conducted in good faith and consistent with this policy is welcome; we don’t intend to pursue action against researchers who follow it. When in doubt, ask us first at contact@zpetal.com.
REPORT TO
contact@zpetal.com