Back to Legal Center
Security ResearchPolicy 11 of 13

Responsible Disclosure

IRU Shield welcomes good-faith reports of legitimate security vulnerabilities affecting owned and operated systems and services.

1. Good-faith reporting expectations

  • Do not exploit vulnerabilities beyond what is necessary to demonstrate existence.
  • Do not access, alter, or retain data that does not belong to you.
  • Do not disrupt service availability or degrade customer protection.
  • Give IRU Shield a reasonable opportunity to investigate and remediate before public disclosure.
  • Provide enough detail for reproduction, verification, and secure triage.