Responsible Disclosure
We welcome good-faith vulnerability reports and follow a coordinated disclosure process to protect users and systems.
Reporting Guidelines
Include clear reproduction steps, affected endpoints, and impact.
01
Report Securely
Send findings to hello@bitregex.com with reproduction details, affected assets, and impact assessment.
02
Initial Triage
We validate scope and reproducibility, then classify severity and remediation path.
03
Coordinate Remediation
We collaborate on fix timelines, retest where needed, and communicate closure status.
Acknowledgment
Receipt + Scope
We confirm receipt and whether the report appears to be in scope.
Triage Decision
Risk-Based
Validation of severity, impact, and affected scope.
Status Updates
Material Changes
Updates when scope, remediation, or coordination status changes.
Resolution
Coordinated
Remediation and disclosure timing reflect impact and complexity.
Safe Harbor Expectations
We support good-faith research that avoids privacy violations, data destruction, service degradation, or social engineering of our team.
Do not access or modify data beyond what is required to demonstrate a vulnerability. Stop testing immediately once sufficient proof is obtained and share findings through the reporting channel.
Submit a security report
Use email for vulnerability disclosures and include detailed proof of concept and impact context.
Report Vulnerability