Responsible Disclosure Policy

This policy applies to:

• Vulnerabilities in www.einshield.com and related subdomains
• Security weaknesses in any publicly accessible Einshield applications or services

If you believe you have discovered a security vulnerability:

• Do not exploit it, alter data, or disrupt services
• Do not access non-public data or attempt to compromise client systems
• Provide a clear and detailed report including:
  • Vulnerability description
  • Steps to reproduce
  • Potential impact
  • Suggested remediation (if possible)
• Allow us reasonable time (typically 30–60 days) to investigate and remediate before public disclosure

Please include in your report:

• Your contact details (name, email, optional PGP key)
• Detailed vulnerability information
• Proof-of-concept or screenshots (if safe and legal to provide)

• We will acknowledge receipt of your report within 7 business days
• We will investigate the issue and keep you updated on progress
• Once resolved, we may credit you publicly (if you consent)
• Researchers acting in good faith under this policy will not face legal action from Einshield

If you follow this Responsible Disclosure Policy in good faith:

We value the efforts of security researchers. While we currently do not operate a paid bug bounty program, responsible disclosures may be recognized with:

• Acknowledgment on our "Security Researchers" page
• Optional letter of appreciation

Einshield may update this Responsible Disclosure Policy from time to time. Changes will be posted on this page with an updated effective date.

For all responsible disclosure matters: