Vulnerability Disclosure Policy

Introduction

At Andreas Goods Limited Website, we take the security of our website and online platforms seriously. We recognize that no system is completely secure, and we welcome the help of security researchers and others who discover vulnerabilities in our website or online platforms. This Vulnerability Disclosure Policy ("Policy") outlines the process for reporting vulnerabilities to us and our commitment to addressing and fixing those vulnerabilities in a timely manner.

​

Scope

​

This Policy applies to all individuals, including but not limited to security researchers, who discover vulnerabilities in our website or online platforms. This includes vulnerabilities in our web applications, APIs, and other online services.

 

Reporting Vulnerabilities

 

If you discover a vulnerability in our website or online platforms, we encourage you to report it to us as soon as possible. You can report vulnerabilities by sending an email to [Your Contact Information]. Please include a detailed description of the vulnerability, including steps to reproduce it, and any other relevant information that may help us understand and address the issue.

 

Response and Remediation

 

Upon receiving a vulnerability report, we will review the information and work to confirm the vulnerability. Once confirmed, we will prioritize the vulnerability based on its severity and potential impact. We will work to address and fix the vulnerability in a timely manner and will provide updates on our progress to the reporter.

 

Responsible Disclosure

 

We believe in responsible disclosure and will work with security researchers and others who report vulnerabilities in good faith. We will not take legal action against individuals who report vulnerabilities to us in accordance with this Policy.

 

Legal and Ethical Guidelines

 

We expect individuals who report vulnerabilities to us to comply with all applicable legal and ethical guidelines. This includes not accessing or modifying data without permission, not disrupting or damaging our systems, and not sharing information about vulnerabilities with others without our permission.

 

No Monetary Rewards

 

We do not currently offer monetary rewards for vulnerability reports. However, we appreciate the help of security researchers and others who report vulnerabilities to us and will acknowledge their contributions publicly, if desired.

 

Contact Information

 

If you have any questions about this Policy or would like to report a vulnerability, please contact us at Andreas Goods Limited.

​

We are committed to maintaining the security of our website and online platforms and appreciate the help of security researchers and others who report vulnerabilities to us. Thank you for your assistance in helping us keep our systems safe and secure.