Ontivity Vulnerability Disclosure Policy
PURPOSE
Ontivity is committed to maintaining the security and integrity of our systems and data.
This Vulnerability Disclosure Policy outlines how security researchers and other individuals can report potential vulnerabilities responsibly.
SCOPE
This policy applies to all Ontivity-owned websites, applications, and systems that are publicly accessible.
Reporting a Vulnerability
If you discover a security vulnerability, please report it to us promptly by sending an
email to:
Include the following details in your report:
• A clear description of the vulnerability.
• Steps to reproduce the issue.
• Any supporting evidence (screenshots, logs, or proof-of-concept code).
Guidelines for Researchers
• Do not exploit the vulnerability beyond what is necessary to demonstrate it.
• Do not access, modify, or delete data that does not belong to you.
• Do not perform actions that could degrade Ontivity services or harm users.
• Do not share vulnerability details publicly until Ontivity confirms remediation.
Our Commitment
-
We will acknowledge receipt of your report within 5 business days.
-
We will provide updates on remediation progress.
-
We will not pursue legal action against individuals who follow this policy in good faith.
Safe Harbor
Ontivity considers activities conducted under this policy to be authorized, provided they are carried out in good faith and within the scope defined above.
