Security is what we do, so we hold ourselves to the same standard we assess others against.
Protecting client information
Engagement findings, reports and any information about client systems are treated as strictly confidential, protected in transit and at rest, and retained only as long as needed before being securely destroyed. Only the people delivering your work can access it.
Responsible disclosure
If you think you have found a security vulnerability in this website or in our systems, we would like to know. Please report it through our contact page with enough detail for us to reproduce it, and allow us a reasonable opportunity to fix it before any public disclosure.
We ask that you do not access or alter data that is not yours, do not degrade our services, and act in good faith. We will not take action against good-faith researchers who follow this approach.