1. Reporting a Vulnerability
Email security@linuxguard.io with what you found, where you found it, the steps to reproduce it, and its impact.
Please do not include customer data in your report.
LinuxGuard.io
Vulnerability Disclosure Policy
This policy explains how to report a security vulnerability to LinuxGuard Ltd and what you can expect from us when you do.
2. Scope
This policy covers:
• linuxguard.io and its subdomains operated by LinuxGuard, including the console, the Insights API and docs.linuxguard.io
• The LinuxGuard agent, its packages and its container image
3. Out of Scope
• Denial-of-service and volumetric testing.
• Social engineering and physical attacks.
• Spam, or content-spoofing reports with no security impact.
• Third-party services we use but do not operate.
• Automated scanner output without a demonstrated impact.
• Findings that need a compromised device or a rooted host.
4. What We Commit To
• Acknowledge your report within three business days.
• Keep you updated as we investigate and fix it.
• Agree public disclosure with you once a fix is available, or after 90 days if we have not fixed it.
• Credit you, if you wish.
5. Safe Harbour
If you act in good faith under this policy, we will not pursue legal action against you or ask law enforcement to investigate you. Good faith means that you:
• make a reasonable effort to avoid privacy violations, data destruction and service disruption;
• access only the data needed to show the issue;
• give us reasonable time to fix it before disclosing.
6. Rewards
We do not run a bug bounty programme.
Last updated: