Disclosure Policy

PurposeScopeReporting GuidelinesWhat to AvoidOur CommitmentSafe Harbor

Purpose

At Foxlogik, the security of our users’ data and systems is a top priority. We value the contributions of security researchers who help identify and responsibly disclose vulnerabilities. This policy outlines the proper way to report potential security issues so we can address them quickly and effectively.

Scope

This policy applies to:


  • All Foxlogik public-facing websites, applications, and services.
  • All versions of Foxlogik software currently in active support.
  • Any third-party services directly integrated into our platform where we manage the integration.

Reporting Guidelines

If you discover a potential security vulnerability, please follow these steps:


  1. Email your findings to compliance@ai.foxlogik.com as soon as possible.
  2. Include in your report:
    1. A detailed description of the vulnerability.
    2. Steps to reproduce the issue.
    3. Any proof-of-concept (PoC) code or screenshots (if applicable).
    4. Your contact information for follow-up.
    5. Use encrypted communication if your report contains sensitive data (PGP key available upon request).

What to Avoid

We ask that you:


  • Do not publicly disclose the vulnerability before we have resolved it.
  • Do not access, modify, or delete data that is not your own.
  • Do not perform any actions that could disrupt our services, including Denial of Service (DoS) testing.
  • Do not attempt social engineering, phishing, or physical attacks on Foxlogik employees, contractors, or infrastructure.

Our Commitment

When you follow this policy:


  • We will acknowledge receipt of your report within 3 business days.
  • We will provide regular updates on the status of your report until it is resolved.
  • We will not take legal action against you for activities conducted in good faith and in line with this policy.
  • With your permission, we may publicly acknowledge your contribution after the issue is fixed.

Safe Harbor

Activities conducted in compliance with this policy will be considered authorized. We will not pursue legal action or law enforcement investigations against security researchers who follow these guidelines in good faith.

Report a Vulnerability: compliance@ai.foxlogik.com