Security

Responsible disclosure

Last updated: 7 October 2026 · Good-faith security research is welcome.

CySecWall builds and operates managed cybersecurity services for SMBs. We also run this marketing site and related tooling. If you find a vulnerability that affectsour systems (not a third-party client you do not have permission to test), we want to hear from you.

In scope (examples)

  • cysecwall.com and subdomains we clearly operate (including auth used for the content CMS).
  • Public API endpoints exposed by this site (for example the contact form handler).
  • Misconfigurations that could expose non-public CySecWall operational data.

Out of scope

  • Testing against CySecWall client environments, tenants, or endpoints without written authorization from that client and from us.
  • Denial-of-service, social engineering of staff or clients, physical attacks, or spam.
  • Findings that require unrealistic user interaction or concern only outdated browsers.
  • Third-party products we did not configure, unless the issue is in our integration.
  • Automated mass scanning that degrades service availability. Targeted, non-destructive proofs are preferred.

How to report

  1. Email hello@cysecwall.com with a clear subject such as “Security disclosure” or “Abuse report”.
  2. Include steps to reproduce, affected URLs or hosts, impact assessment, and any proof-of-concept that stays non-destructive.
  3. Give us a reasonable window to investigate and fix the issue before any public discussion. We will acknowledge your report and keep you informed as we work on it.

What we ask of reporters

  • Act in good faith and avoid privacy violations, data destruction, or service disruption.
  • Do not access data that is not yours; stop and report if you encounter it.
  • We do not run a paid bug bounty. Recognition and remediation priority are handled case by case.

Active clients

If you are an active CySecWall client with a suspected incident in your environment, use the incident channel documented in your onboarding pack. Website visitors should emailhello@cysecwall.com or call (647) 857-9005 and mark the message urgent.

Related notices

See also the privacy notice and terms of use.