Found a problem? Tell us before anyone else.

Reporting a vulnerability

If you believe you have found a security vulnerability in SecBox, the SecBox website, or any other ArcQubit product, email us at security@arcqubit.ai with a description of the issue, the steps to reproduce it, and any proof-of-concept material. We reply within 24 hours and will keep you updated as we investigate and fix the issue.

What we ask

• Give us a reasonable amount of time to investigate and fix an issue before disclosing it publicly.
• Avoid accessing, modifying, or deleting data that is not your own.
• Do not run automated scanning or load-testing tools against production systems.
• Do not use findings to further compromise our systems or accounts beyond what is necessary to demonstrate the issue.

Scope

This policy covers secbox.ai, the SecBox application, and their supporting infrastructure. If you are unsure whether something is in scope, report it anyway and we will let you know.