Responsible Disclosure
How to report a suspected security issue in a Blackpine-owned public system without expanding testing beyond what is safe and authorized.
How to report
Email security@blackpinecybersecurity.com with the affected hostname or URL, a concise description of the issue, reproduction information that does not expose unrelated data, and a safe way to contact you.
Please avoid
Do not access or alter data that does not belong to you.
Do not intentionally degrade availability, perform denial-of-service testing, or use social engineering against staff or customers.
Do not publish sensitive details before Blackpine has had a reasonable opportunity to investigate and address the issue.
Scope and authorization
A vulnerability report does not create authorization to expand testing into unrelated systems, accounts, customer data, third-party services, or physical/social attack paths.
If there is uncertainty about whether an action is safe, stop and ask before proceeding.
Security.txt
Blackpine publishes a machine-readable security contact at /.well-known/security.txt.