Responsible disclosure
How to report a security vulnerability in Desprings systems or this website.
Scope
In scope:
- This website, desprings.com.
- The production infrastructure that serves it.
- The assets deployed with it.
Out of scope:
- Third party services, including the providers listed in the privacy policy.
- Denial of service testing.
- Social engineering.
How to report
Report by email: security@desprings.com
What to include
- The affected URL or component.
- The steps to reproduce the issue.
- What an attacker could do with it.
- How to reach you for follow up.
Acknowledgement and triage timeframes
This section is being finalized with counsel.
Disclosure coordination
This section is being finalized with counsel.
Legal safe harbor
This section is being finalized with counsel.
Named acknowledgments
This section is being finalized with counsel.