Responsible Disclosure
Report a vulnerability — safely and in good faith.
Last updated: 9 September 2026
ByteDefender Inc. is a cybersecurity firm, and we hold our own systems to the standard we advise for others. We welcome reports of security vulnerabilities in our website and infrastructure, and we are committed to working with researchers in good faith.
Scope
This policy covers bytedefender.ca and the infrastructure that directly serves it. Third-party services we rely on (for hosting or email delivery) are governed by their own disclosure programs.
How to report
Email contact@bytedefender.ca with the subject Security Report, or use our contact page and select Security / Vulnerability Report. Include enough detail to reproduce the issue — affected URL, steps, and any proof-of-concept — so we can validate and fix it quickly. A machine-readable contact is published at /.well-known/security.txt.
Safe harbour
We will not pursue or support legal action against researchers who, in good faith, discover and report vulnerabilities in accordance with this policy. We consider such research authorized conduct.
Guidelines
- Do not access, modify, or delete data that is not yours, and stop at the point where you can demonstrate a vulnerability.
- Do not degrade, disrupt, or run denial-of-service tests against our services.
- Do not use social engineering, phishing, or physical attacks against our people or offices.
- Give us a reasonable opportunity to remediate before any public disclosure.
What to expect from us
- We aim to acknowledge valid reports promptly and keep you informed as we investigate.
- We will work to remediate confirmed issues in a timely manner based on severity.
- With your permission, we are happy to credit your contribution.
Contact
Security reports can be emailed to contact@bytedefender.ca or submitted through our contact page.