In scope
- This website and its configuration
- Published JC!IJB! software
- Documentation that would lead a customer to an insecure deployment
Responsible disclosure
Report a vulnerability.
Write to security@jcijb.com. We read every report, answer it, and keep you informed until it is resolved.
Please do not
- Access, change or delete data that is not yours
- Degrade the service for others
- Test against a customer's deployment without that customer's permission
- Send credentials, personal data or exploit payloads beyond what is needed to show the issue
What to include
- What you found and where
- Steps to reproduce
- The impact you believe it has
- How you would like to be credited, if at all
What to expect
- An acknowledgement in writing
- Our assessment and the planned fix
- Notice before publication of an advisory
- No legal action against good-faith research within these rules
Machine-readable contact: /.well-known/security.txt (RFC 9116).
SOVEREIGN BY DESIGN.
Request a technical briefing
Tell us what you need to protect. A briefing is an engineering conversation; it never needs your credentials, network inventories or logs.