.svg)
Copyright © 2024 Ensis Inc. All Rights Reserved.
.svg)
At Ensis AI, we take the security of our systems and services seriously. We recognize the importance of security researchers and the valuable role they play in helping us maintain a safe and secure environment for our customers. This policy outlines our approach to responsible vulnerability disclosure and the procedures to follow when reporting security vulnerabilities to us.
This policy applies to all individuals and organizations, including security researchers, customers, and third parties, who discover and wish to report security vulnerabilities in Ensis AI's products, services, or systems.
If you discover a potential security vulnerability, we encourage you to report it to us promptly and responsibly by emailing us at info@ensis.ai. Please include the following information in your report:
- Description of the vulnerability and its potential impact.
- Steps to reproduce the vulnerability.
- Your contact information for further communication.
Upon receiving a vulnerability report, we commit to:
- Acknowledging receipt of your report promptly (within 3 business days).
- Investigating the issue and assessing its validity.
- Communicating with you to understand the details and verify the vulnerability.
- Keeping you informed of our progress and any remediation steps taken.
- Treating your report confidentially and with respect for your privacy, in accordance with our Privacy Policy.
As a security researcher or reporter, we expect you to:
- Make every effort to avoid privacy violations, disruption to our services, and destruction of data during your research.
- Adhere to the principles of responsible disclosure and avoid disclosing or exploiting the vulnerability to others until we have had sufficient time to address it.
- Provide us with reasonable time to investigate and mitigate the reported vulnerability before publicly disclosing it.
The following activities are not authorized under this policy:
- Denial of service (DoS) attacks.
- Physical attacks against our offices, data centers, or personnel.
- Social engineering attacks against our employees, customers, or vendors.
- Any activity that violates any law or causes harm to Ensis AI, our customers, or third parties.
We will not take legal action against you for reporting a security vulnerability to us, provided you comply with this policy. We recognize and respect the rights of security researchers who work to improve security for everyone.
For reporting security vulnerabilities or questions related to this policy, please contact us at info@ensis.ai.
We may update this policy from time to time. Any changes will be posted on our website, and your continued participation in our responsible disclosure program constitutes acceptance of those changes.