Responsible Disclosure

We value the work of security researchers. If you believe you have found a vulnerability in a Posturian website or service, please tell us so we can fix it.

How to report

Send your report by email to contact@posturian.ai.

What to include

• A description of the issue and its potential impact.
• Steps to reproduce, including affected URLs or components.
• Any proof-of-concept code or screenshots.
• Your contact details, if you want a reply.

Guidelines

• Test only against systems you are authorized to test, and avoid privacy violations, data destruction, and service disruption.
• Do not access, modify, or retain data that is not yours; stop and report once you have proof of the issue.
• Do not use denial-of-service, social engineering, or physical attacks.
• Give us reasonable time to fix the issue before sharing details publicly.

What happens next

We review the reports we receive and work to fix confirmed issues. Good-faith research that follows these guidelines is welcome.

Scope

• In scope: Posturian websites and the services we operate.
• Out of scope: third-party services, customer environments, and social engineering or denial-of-service testing.