Responsible Disclosure

Last updated: 20 July 2026

ByteDefender Inc. is a cybersecurity firm, and we hold our own systems to the standard we advise for others. We welcome reports of security vulnerabilities in our website and infrastructure, and we are committed to working with researchers in good faith.

Scope

This policy covers bytedefender.ca and the infrastructure that directly serves it. Third-party services we rely on (for hosting, fonts, or email delivery) are governed by their own disclosure programs.

How to report

Please report suspected vulnerabilities through our contact page, marking your message as a security report. Include enough detail to reproduce the issue — affected URL, steps, and any proof-of-concept — so we can validate and fix it quickly. A machine-readable pointer is published at /.well-known/security.txt.

Safe harbour

We will not pursue or support legal action against researchers who, in good faith, discover and report vulnerabilities in accordance with this policy. We consider such research authorized conduct.

Guidelines

• Do not access, modify, or delete data that is not yours, and stop at the point where you can demonstrate a vulnerability.
• Do not degrade, disrupt, or run denial-of-service tests against our services.
• Do not use social engineering, phishing, or physical attacks against our people or offices.
• Give us a reasonable opportunity to remediate before any public disclosure.

What to expect from us

• We aim to acknowledge valid reports promptly and keep you informed as we investigate.
• We will work to remediate confirmed issues in a timely manner based on severity.
• With your permission, we are happy to credit your contribution.

Contact

Reports and questions can be sent through our contact page.