How to report
Email info@quantineliq.com with the subject “Security report”. Include the product and version, the steps to reproduce, the impact you observed, and how to reach you. Please do not include personal data you obtained while testing.
What to expect
- We acknowledge your report promptly and tell you who is handling it.
- We keep you informed while we investigate and fix the issue.
- We tell you when the fix is released, and credit you if you wish.
Scope
QUME, RCC, QWorks and their agents, consoles and APIs, and this website. Denial-of-service testing, social engineering and physical attacks are out of scope. Test only against systems you own or are authorised to test.
Safe harbour
We will not pursue legal action against researchers who act in good faith, follow this policy, avoid harm to people and data, and give us reasonable time to fix an issue before disclosing it.