Policy 15
Vulnerability Disclosure
How to report a security vulnerability affecting our site or systems.
We thank researchers who report, in good faith, security vulnerabilities affecting safehavenprotec.com or our systems.
- Reporting: jm@safehavenprotectioninc.com, with a description, reproduction steps and impact.
- Our commitments: acknowledgement within 3 business days, regular updates, a fix within a reasonable time, and no legal action against researchers who follow this policy.
- Rules: do not access, modify or delete third-party data; do not disrupt our services (no denial of service) or socially engineer our staff or clients; keep the issue confidential until fixed.
- Out of scope: client systems and third-party platforms (site host, Meta, TikTok) — report those to their owners.
We do not offer monetary rewards at this time, but we are glad to publicly credit researchers who wish it.