Security and disclosure.

Scope

Vaxelrod welcomes good faith vulnerability reports for this site and for the VIPS platform at vips.vaxelrod.ai.

How to report

Send reports to sabrams@vaxelrod.ai with the steps needed to reproduce the issue. We acknowledge reports within three business days.

Safe harbor

Researchers who act in good faith are protected under this policy when they avoid privacy violations and service disruption, and do not access, modify, or exfiltrate data that is not their own. Vaxelrod will not pursue action against research conducted within these limits.

Out of scope

• Denial of service testing of any kind.
• Social engineering of Vaxelrod staff, partners, or customers.
• Physical access attempts against any Vaxelrod facility.
• Automated scanning that degrades service.

Handling of sensitive material

Do not send controlled unclassified information or customer data in a report. Describe the issue and the path to it. If demonstrating the issue would require such material, say so and we will arrange a secure channel.