(+84) 247 109 9656

Vulnerability Disclosure Policy

Throughout software development life cycle, CyStack always conforms to the worldwide security policies and standards for the safety of both users and CyStack. However, there could still be some vulnerabilities in our systems. If you have found any of these, please let us know by submitting a report so that we can be acknowledged and contact you as soon as possible to implement necessary fixes.

Found a vulnerability?

When you have found a vulnerability, please consider the following:

1. Contact us directly

We ask that you report the vulnerability upon your finding. Please do not make it public before contacting us to avoid any adverse consequences for users

2. Do not abuse vulnerabilities

If the vulnerability you have found can have impacts on users and CyStack, please do not manipulate it to your own advantage

3. Provide a detailed report

Sufficient information is needed to validate a vulnerability report. It is advisable that you describe in full the detecting process and explain how to reproduce the vulnerability with attachments of screenshots or videos

If all the above apply, please do not hesitate to drop us a line to security@cystack.net. Thank you for your support in making CyStack safer.

Special Thanks

We would like to express our sincere thanks and appreciation to the people who make CyStack safer