Skip to content
AINO Information

Security

Responsible disclosure

If you believe you have found a security issue in this website, in VAST, or in something we operate, we want to hear from you.

How to report

Email roy@ainoinfo.comwith the subject "Security report". Include what you found, where, how to reproduce it, and how we can reach you. A machine-readable version of this policy is at/.well-known/security.txt.

What we ask of you

  • Test only against this website or against VAST instances you are authorized to test. Do not test our clients' systems.
  • Do not access, modify or exfiltrate data that is not yours; stop and report as soon as you have proof.
  • No denial of service, social engineering, or physical attacks.
  • Give us a reasonable time to fix before disclosing publicly; we will agree a date with you.

What you can expect from us

  • Acknowledgement within three working days.
  • An assessment of the report and an expected fix timeline within ten working days.
  • We will not take legal action against research that follows this policy.
  • Credit, if you want it, once the issue is fixed.

Scope

ainoinfo.com and aino-info.com, and the VAST platform software. Systems belonging to our clients are out of scope: report those to the client, or to us and we will forward the report under our agreement with them.