Skip to content

Responsible Disclosure

Found a security issue on this site?

We take the security of our own site as seriously as we ask our clients to take theirs. If you've found a vulnerability, please report it to us directly rather than disclosing it publicly, so we have a chance to fix it first.

How to report

Email info@ittcsec.com with a description of the issue, the steps to reproduce it, and its potential impact. Please don't include real personal data in your report if the issue involves exposed data. A description is enough for us to investigate.

What we ask

  • Give us a reasonable amount of time to investigate and remediate before any public disclosure.
  • Avoid actions that could affect other users: no data exfiltration beyond what's needed to demonstrate the issue, no service disruption, no automated mass-scanning.
  • Test only against this website, not against ITTCsec's clients or any system you have not been separately authorised to test.

This page follows the intent of security.txt, also published at /.well-known/security.txt.

See also: Trust Centre for how this website itself handles security and data.