Responsible Disclosure

Our principles

We ask that anyone who identifies a potential security issue affecting SKIAJO’s own systems report it to us responsibly and privately, giving us a reasonable opportunity to investigate and address it before any public disclosure.

Authorized communication

The only authorized channel for reporting a potential vulnerability is direct email to info@skiajo.com. Please do not report findings through social media, public forums, or third parties.

Scope

This policy applies to systems that SKIAJO Cyber Intelligence directly owns and operates, including https://skiajo.com and associated official subdomains. It does not extend authorization to test the systems, applications, or infrastructure of any SKIAJO client or third party.

Prohibited activity

• Accessing, modifying, or exfiltrating data that does not belong to you
• Testing in a way that degrades service availability (including denial-of-service testing)
• Social engineering of SKIAJO staff or associated parties
• Physical attempts to access SKIAJO facilities or equipment
• Automated, high-volume scanning that could disrupt normal operation of the website
• Public disclosure prior to remediation and coordination with SKIAJO

Reporting process

When reporting an issue, please include enough detail for us to reproduce and understand it: a description of the issue, the steps to reproduce it, the potential impact, and any supporting evidence (screenshots, request/response samples). Please avoid including sensitive personal data of third parties in your report.

What to expect from us

We will acknowledge legitimate reports and work in good faith to investigate and address confirmed issues within a reasonable timeframe. We do not currently operate a paid bug bounty program. [Placeholder: update if a bounty program is introduced.]

Contact

Send responsible disclosure reports to info@skiajo.com.