Security
Responsible disclosure
If you find a vulnerability in Offensly, tell us first. We fix it, and we credit you if you want.
How to report
Email security@offensly.com with what you found, the steps to reproduce it and its impact. Our contact details are also in /.well-known/security.txt.
What we promise
- We confirm your report within 3 business days.
- We keep you updated until the issue is fixed.
- We do not take legal action against good-faith research that follows these rules.
Rules
- Test only against your own account and data. Do not access, change or delete other users' data.
- No denial of service, spam, social engineering or physical attacks.
- Give us reasonable time to fix the issue before you disclose it publicly.
In scope
offensly.com, blog.offensly.com, dashboard.offensly.com and api.offensly.com.