Vulnerability Disclosure Policy

ISOweld welcomes responsible reports that protect Customers.

1. Reporting

Email support@isoweld.com.au with affected feature, steps, impact and non-sensitive evidence.

2. Boundaries

• Do not access, alter, download or retain another Customer’s data.
• Do not use denial-of-service, phishing, social engineering or credential attacks.
• Stop if personal information or cross-company access is encountered.
• Do not publicly disclose before reasonable remediation time.

3. Response

ISOweld will acknowledge where practicable, assess severity and work toward remediation. No bounty is promised unless agreed.

4. Good faith

ISOweld does not intend to pursue good-faith researchers who comply with this Policy and act lawfully. This is not authorisation to breach law or third-party systems.

Contact