NORTHGRAY

Security

Vulnerability disclosure

How to report a security problem on northgray.ca.

Found a security problem on northgray.ca? Email contact@northgray.ca with "Security" in the subject line.

Please:

  • don't access, change or delete data that isn't yours;
  • if you come across anyone else's data, stop there. Don't copy, keep or share it, and don't go any further. Delete anything you saved and tell us what you saw;
  • don't slow the site down or run denial-of-service tests;
  • don't test our people or premises;
  • give us 90 days to fix the problem before you publish it.

In return, we'll acknowledge your report within 2 business days and keep you updated until it's fixed. If you'd like, we'll credit you. We don't pay for reports or run a bug bounty.

If you act in good faith and follow these rules, we won't take civil action against you or report you to police. We can only promise this for Northgray. It doesn't bind our service providers, our clients or law enforcement.

← Back to Security