Security Policy

At ReconZero, we are committed to maintaining the highest levels of security and protecting the privacy of our users. We value the contributions of the security community in helping us identify and address vulnerabilities in a responsible manner.

Reporting a Security Vulnerability

If you discover a potential security vulnerability in any of our systems, products, or services, please report it to us promptly. To ensure we can address your findings effectively, follow these guidelines:

Guidelines for Reporting:

  • Email Your Report: Send detailed information to security@reconzero.com. Include a clear description of the issue, steps to reproduce it, and any relevant supporting materials (e.g., screenshots, code snippets).
  • Act in Good Faith: Perform testing in a way that does not disrupt our services, compromise user data, or violate applicable laws.
  • Confidentiality: Do not publicly disclose the vulnerability until we have resolved the issue and provided consent for disclosure.

Our Commitment

  • We will acknowledge receipt of your report within 3 business days.
  • We will provide updates on our progress and work to resolve the issue as quickly as possible.

Scope of This Policy

This policy applies to:

  • ReconZero websites
  • ReconZero applications
  • ReconZero APIs and integrations

Out-of-scope issues include:

  • Reports of outdated software with no demonstrable impact
  • Spam or social engineering attacks
  • Denial-of-Service (DoS) attacks

Legal Safe Harbor

We will not take legal action against individuals who report vulnerabilities responsibly and in accordance with this policy. However, actions that violate laws or harm our systems and users are not covered under this safe harbor.

Thank you for helping us keep ReconZero secure and reliable.

Contact Us

If you have any questions about this policy, reach out to us at security@reconzero.com.