§Security
Coordinated disclosure policy
We welcome reports of security issues in Corvex-RedOps and will work with you to confirm and fix them.
Reporting a vulnerability
Email security@corvex-redops.com with enough detail to reproduce the issue: affected version, component, and a proof of concept where possible. Please give us reasonable time to investigate and fix before any public disclosure.
Scope
- The Corvex-RedOps engine and its official distributions.
- This website and its infrastructure.
Testing must not harm users, degrade services, or access data that is not yours. Social engineering, physical attacks and denial of service are out of scope.
What to expect
- Acknowledgement of your report.
- An assessment and, where valid, a remediation plan.
- Credit on our disclosure wall unless you ask to remain anonymous.
Safe harbour
Good-faith research consistent with this policy is welcome, and we will not pursue action against researchers who follow it. If in doubt, ask first at security@corvex-redops.com.
Machine-readable contact details are published at /.well-known/security.txt.