A safe, coordinated way to report a potential vulnerability affecting a public Alien Tech Services system.
Reporting
Email contact@alientechservices.com with the subject “Security Disclosure.” Include the affected public URL or service, a clear description, the date observed, and steps that allow the issue to be understood without causing harm.
Do not send passwords, private keys, authentication tokens, personal data, or exploit code in the first message. We can coordinate a safer transfer method when needed.
Testing must stay within systems you own or systems for which you have explicit written authorization. This policy does not grant permission to access customer systems, private data, administrative interfaces, accounts, third-party services, or infrastructure outside the published scope.
We will review the report, determine whether it affects a system within our control, and request additional information when useful. Response and remediation timing depends on severity, reproducibility, system ownership, and operational constraints. No payment, reward, or specific timeline is promised by this policy.
If the issue belongs to another organization, contact that system owner directly through its published security channel.
Security services for customer systems use a separate written scope and explicit authorization from the system owner.
