Responsible disclosure.
If you believe you have found a security vulnerability in this website or in an Arcas product, we want to hear about it.
How to report
Write to security@arcasdynamics.com with a description of the issue, the steps to reproduce it and the impact you believe it has.
What we ask
- Give us reasonable time to fix the issue before you disclose it publicly.
- Do not access, change or delete data that is not yours, and stop as soon as you have shown the issue.
- Do not degrade the service for others, and do not use social engineering or physical attacks.
What we do
We will acknowledge your report, keep you informed as we investigate, and tell you when the issue is resolved.
This policy does not authorise testing beyond these terms, and we do not offer rewards.