Responsible Disclosure Agreement

At A-Byte Computer Solutions Limited , we prioritise the security of our systems and data. Our commitment is to uphold the highest security standards, safeguarding our clients' data continuously. We actively collaborate with security researchers and the broader security community to detect and rectify system vulnerabilities.

The ensuing agreement outlines the terms and conditions governing the responsible disclosure of security vulnerabilities by individuals or organisations.

  • Scope of Agreement: This agreement pertains to any disclosure of system, infrastructure, website, network, or other information technology service vulnerabilities ('Vulnerability') made by the Disclosing Party.

  • Reporting: The Disclosing Party must promptly report any discovered Vulnerability to the Organisation by emailing soc@abyte.co.uk. The email must include a detailed description of the Vulnerability, including steps to reproduce it and any supporting documentation.

  • Non-Disclosure: The Disclosing Party commits to maintaining strict confidentiality concerning the Vulnerability and all associated communications until the Organisation publicly discloses the Vulnerability or grants written permission for disclosure.

  • No Harm: The Disclosing Party agrees not to engage in any actions that could harm, disrupt, or compromise the Organisation's information technology systems or services. Reasonable efforts must be made to prevent any disclosures that could harm the Organisation, its customers, or third parties.

  • Good Faith: The Disclosing Party pledges to act in good faith throughout the disclosure process, providing the Organisation with sufficient information to replicate and validate the Vulnerability.

  • No Legal Action: The Organisation commits not to initiate any legal actions against the Disclosing Party for disclosing the Vulnerability per this agreement.

  • Public Disclosure: The Organisation agrees to publicly acknowledge the Disclosing Party's contribution to the responsible Vulnerability disclosure, unless otherwise requested by the Disclosing Party.

  • No Obligation: The Organisation is not obligated to remedy any Vulnerabilities reported by the Disclosing Party.

  • Governing Law: This agreement is governed by and construed in accordance with the laws of England and Wales, without regard to conflicts of law principles. By disclosing a Vulnerability to the Organisation, the Disclosing Party agrees to abide by the terms and conditions of this agreement.

Thank you for helping us to maintain the security of our systems and data.

Copyright A-byte Computer Solutions 2024

Abyte Solutions is a trading name of A-byte Computer Solutions.