Responsible Disclosure

We prioritize the security and privacy of our users. We recognize the valuable role that independent security researchers play in enhancing our security posture. This Responsible Disclosure Policy aims to provide clear guidelines for reporting potential security vulnerabilities to us.

Reporting a vulnerability

If you believe you have discovered a security vulnerability on Ikafox or any of our other products, we encourage you to notify us responsibly. Please follow the guidelines below to help us address the issue promptly:

Email submission: Send your findings to our dedicated security team at security@ikabus.com. Include the following details:
- A detailed description of the vulnerability.
- Steps to reproduce the vulnerability.
- Any potential impact it might have.
- Your contact information (optional if you wish to remain anonymous).
Response time: We acknowledge receipt of all vulnerability reports within 48 hours. We will investigate and take appropriate action as quickly as possible.

Guidelines for researchers

To ensure a safe and effective disclosure process, please adhere to the following guidelines:

Avoid privacy violations: Do not access, modify, or delete data that does not belong to you.
Non-disruption: Do not perform any actions that could disrupt our service or degrade user experience, including Denial of Service (DoS) attacks.
Legitimate testing: Use your own accounts for testing purposes. Do not use automated tools that could affect the performance of our site.
Confidentiality: Do not publicly disclose the vulnerability until we have had a reasonable amount of time to address it.

What to expect from us

When you report a vulnerability in compliance with this policy, we commit to:

Prompt acknowledgment: Acknowledge receipt of your report within 48 hours.
Timely updates: Provide regular updates on the status of the vulnerability as we investigate and address the issue.
Recognition: If you wish, we will recognize your contribution to improving our security on our website, unless you prefer to remain anonymous.

Legal safe harbor

To encourage responsible reporting, we pledge not to initiate legal action against researchers who:

Act in good faith to discover and report vulnerabilities.
Follow the guidelines outlined in this policy.

Changes to This Policy

We may update this Responsible Disclosure Policy from time to time. We will notify you of any changes by posting the new policy on this page.

Contact Us

If you have any questions about this policy, please contact us at info@ikabus.com.

Thank you for helping us keep Ikafox and our other products secure.

Need help or advice?

Do you have a question about our products or our services? We are happy to help you!

KVK number
58528792

VAT number
NL853077794B01