911inform Vulnerability Disclosure Policy
Security Vulnerability Disclosure Program
911inform is committed to maintaining the security and integrity of our systems, services, and customer data. We welcome reports from security researchers, customers, partners, and members of the public who believe they have identified a security vulnerability affecting a 911inform system, application, service, or infrastructure component.
How to Report a Vulnerability
If you believe you have discovered a security vulnerability, please submit a report to: Email: security@911inform.comWhen reporting a vulnerability, please include:
- A detailed description of the issue.
- The affected system, application, URL, API, or component.
- Steps necessary to reproduce the issue.
- Proof-of-concept code, screenshots, log excerpts, or other supporting evidence, if available.
- The potential security impact of the vulnerability.
- Your name and contact information for follow-up communications.
Our Commitment
911inform will:
- Acknowledge receipt of vulnerability reports in a timely manner.
- Review and validate reported vulnerabilities.
- Investigate and remediate confirmed vulnerabilities according to our risk management and vulnerability management processes.
- Coordinate with the reporter when additional information is required.
- Maintain appropriate confidentiality regarding reported vulnerabilities and reporter information.
Responsible Disclosure Expectations
To help protect our customers and systems, we ask that reporters:
- Act in good faith and avoid activities that could harm 911inform, its customers, or their data.
- Do not intentionally access, modify, destroy, or exfiltrate data.
- Do not conduct denial-of-service attacks, phishing campaigns, social engineering activities, malware deployment, or other disruptive actions.
- Limit testing to the minimum extent necessary to demonstrate the existence of a vulnerability.
- Avoid disclosing vulnerability details publicly until 911inform has had a reasonable opportunity to investigate and address the issue.
Scope
This disclosure channel is intended solely for reporting security vulnerabilities in systems, applications, services, and infrastructure owned or operated by 911inform.
General support requests, product issues, feature requests, and non-security-related concerns should be submitted through normal customer support channels.
Legal Safe Harbor
911inform will not pursue legal action against individuals who, in good faith:
- Comply with this Vulnerability Disclosure Program;
- Avoid privacy violations, service disruption, and data destruction;
- Promptly report discovered vulnerabilities; and
- Do not exploit vulnerabilities beyond what is reasonably necessary to demonstrate their existence.
Activities conducted in a manner inconsistent with these guidelines may be referred for further review.
