Securitycheck Extensions – Responsible Vulnerability Disclosure Policy

At Securitycheck Extensions, we are committed to providing secure Joomla and WordPress security solutions. We recognize the important role that independent security researchers and our users play in keeping our products safe.

This policy outlines how you can report potential security vulnerabilities responsibly and how we commit to handling them.

Reporting a Vulnerability

If you believe you have found a security vulnerability in one of our products or services, please report it to us as quickly as possible.

  • Preferred method: Send an email to contacto at this domain name

  • What to include:

    • Product name and version affected (e.g., Securitycheck Pro for Joomla).

    • A clear description of the vulnerability.

    • Steps to reproduce the issue (proof of concept).

    • Any potential impact you have identified.

  • Optional but recommended: Suggestions for mitigation or patching.

Please do not publicly disclose the vulnerability before we have confirmed and fixed it.

Our Commitments

  • Acknowledgment: We will confirm receipt of your report within 1 business day.

  • Assessment: We will investigate and evaluate the reported issue promptly.

  • Feedback: We will provide updates on the progress of the investigation.

  • Resolution: We aim to address confirmed vulnerabilities and release security updates within 3 days.

  • Credit: With your consent, we will acknowledge your contribution in our release notes or security advisories.

Rules of Engagement for Researchers

To protect our users and their systems, we ask that you:

  • Do not exploit a vulnerability beyond what is necessary to demonstrate it.

  • Do not access, modify, or delete user data.

  • Do not affect the availability of our services.

  • Follow applicable laws at all times.

Reports made in good faith and following this policy will not result in any legal action against you.

Scope

This policy applies to all current Securitycheck Extensions products, including but not limited to:

  • Securitycheck

  • Securitycheck Pro (Joomla & WordPress)

  • Securitycheck Database Update

  • Securitycheck Control Center (Joomla & WordPress)

Contact

To report a vulnerability or request more information, please contact:

  • contacto at this domain name