At SentiLink, we consider the security of our systems a top priority. But no matter how much effort we put into system security, there can still be vulnerabilities present.
If you believe you have identified a potential security vulnerability, we would like to know about it so we can take steps to address it as quickly as possible. We would like to ask you to help us better protect our clients and our systems.
Do not engage in any activity that can potentially or actually cause harm to SentiLink, our partners or our employees.
E-mail your findings to firstname.lastname@example.org.
Do not store, share, compromise or destroy SentiLink or customer data. If Personally Identifiable Information (PII) is encountered, you should immediately halt your activity, purge related data from your system, and immediately contact SentiLink. This step protects any potentially vulnerable data, and you.
Do not reveal the problem to others until it has been resolved,
Do not use attacks on physical security, social engineering, distributed denial of service, spam, third-party applications or any other systems that may impact SentiLink’s services.
Do provide sufficient information to reproduce the problem, so we will be able to resolve it as quickly as possible. Usually, the IP address or the URL of the affected system and a description of the vulnerability will be sufficient, but complex vulnerabilities may require further explanation.
Certain vulnerabilities are considered out of scope for our Responsible Disclosure Program. Out of Scope vulnerabilities include:
Certain infrastructure is considered out of scope for our Responsible Disclosure Program. Out of Scope Systems include:
We strive to resolve all problems as quickly as possible, and we would like to play an active role in the ultimate publication on the problem after it is resolved.