# VuseDesk vulnerability disclosure
# RFC 9116. If you have found a security issue in VuseDesk, this is how to
# tell us. We do not run a paid bounty, and we do not pursue good-faith
# researchers who follow the policy below.

Contact: mailto:info@vusedesk.com
Contact: https://www.vusedesk.com/resources/contact
Expires: 2027-09-29T00:00:00.000Z
Preferred-Languages: en
Canonical: https://www.vusedesk.com/.well-known/security.txt
Policy: https://www.vusedesk.com/security#report

# Please put "Security" in the subject line so it is routed as a report rather
# than as a support question.
#
# What helps us: the URL or endpoint, the steps to reproduce, what you were
# signed in as, and what you were able to see or change that you should not
# have been. A screenshot or a short recording is welcome.
#
# What we ask: test only against accounts you control, do not access, modify or
# retain anyone else's data, do not degrade the service for other customers, and
# give us a reasonable chance to fix the issue before disclosing it publicly.
#
# What you get: an acknowledgement, an honest answer about whether it is a real
# finding, and credit if you want it.