APTStrikeRequest a scope call

Security

Found something? Tell us first.

We test other people's systems for a living, so we hold our own to the same standard. If you find a vulnerability in ours, this is how to report it safely.

Report to
security@aptstrike.com
Scope
aptstrike.com
and subdomains
Bounty
None — credit
with your permission
Machine-readable
security.txt
  1. 01

    How to report

    Email security@aptstrike.com with what you found, the steps to reproduce it and the impact you expect.

    You will receive an acknowledgement within 24 hours, and updates until the issue is resolved.

  2. 02

    Scope

    In scope: aptstrike.com and its subdomains.

    Out of scope: denial of service and load testing, spam, social engineering, physical attacks, and third-party services such as Cloudflare or Google — please report those to the provider. Scanner output without a demonstrated impact is not a finding.

  3. 03

    Rules

    Only test what is in scope. Do not access, change or delete data that is not yours; if you reach sensitive data, stop and report it. Do not disrupt the service.

    Give us a chance to fix the issue before you disclose it. The disclosure date is agreed with you by email, and is never later than 90 days after your report. Often you will receive permission to publish by email as soon as the fix is deployed.

  4. 04

    Safe harbor

    If you follow this policy in good faith, your research is treated as authorized: no legal action will be taken against you for it, and none will be supported. This covers APTStrike only; it cannot authorize testing of third-party services.

  5. 05

    Recognition

    There is no paid bug bounty. With your permission, researchers who report valid issues are credited on this page.

    Acknowledgements: none yet.