Our commitment to researchers
We welcome good-faith security research. If you believe you've found a vulnerability in an Alienox Networks system or this website, we want to hear from you — and we will not pursue legal action against researchers who follow this policy.
How to report
Email security@alienox.com with a description of the issue, steps to reproduce, and the potential impact. Encrypt sensitive details if you prefer — ask us for our PGP key. Please do not disclose the issue publicly until we've had a reasonable window to fix it.
What you can expect
- Acknowledgement of your report within 2 business days.
- A triage decision and severity assessment within 5 business days.
- Status updates at least weekly until resolution.
- Public credit in our release notes if you'd like it — or anonymity if you don't.
What we ask
- Don't access, modify or delete data that isn't yours — demonstrate impact with the minimum necessary proof.
- No denial-of-service testing, social engineering of our staff, or physical intrusion attempts.
- Give us up to 90 days to remediate before any public disclosure; we'll tell you if we need less.
Safe harbor
Research conducted under this policy is authorized for the purposes of anti-hacking and anti-circumvention laws, and we consider it authorized conduct under our terms. If a third party takes issue with your good-faith research under this policy, we'll make that authorization clear.