Skip to main content
Northken
Menu

Security

Coordinated vulnerability disclosure.

Responsibly report a potential vulnerability. We acknowledge receipt, assess the impact, and coordinate remediation with you.

What a useful report should include.

Affected surface

The affected URL, product, or service, including the observed environment.

Reproduction steps

Minimal, reproducible steps that do not access another person’s data.

Potential impact

Expected behavior, observed behavior, and possible consequences.

Contact details

A secure way to reach you to acknowledge receipt and coordinate next steps.

Responsible research guidelines.

Do not exploit a vulnerability beyond what is necessary to demonstrate it. Do not access another person’s data, disrupt services, or publish details before we can assess and remediate the issue. Northken will not pursue good-faith research conducted within these guidelines.