Responsible Disclosure
Found a security issue in our systems? We welcome reports from the security community and will work with you in good faith to fix it.
Scope
This policy covers newexploits.com and the infrastructure we operate directly. Client systems tested under engagement are out of scope — report those through the client's own channel.
How to report
Send the details through our contact form, or reach us on Telegram. If you can, encrypt sensitive details; ask us for a PGP key first.
What to include
A clear description of the issue, the steps or proof-of-concept to reproduce it, the impact you believe it has, and how we can contact you.
Our commitment
We will acknowledge your report, keep you updated on our progress, and fix confirmed issues as quickly as we reasonably can. We will credit you if you wish.
Safe harbour
If you act in good faith under this policy — avoiding privacy violations, data destruction and service disruption — we will not pursue legal action against you for your research.
Out of scope
Social engineering of our staff, physical attacks, denial of service, and automated scanning that degrades our services are not authorised.