Vulnerability disclosure
Report a security vulnerability
OrenG Academy is a cybersecurity company, and we take reports about our own systems seriously. If you think you've found a vulnerability in this website or another OrenG Academy service, please tell us.
security@orengacademy.comHow to report
Email security@orengacademy.com and include:
- what the issue is and where you found it
- steps to reproduce it, or a proof of concept
- the impact you think it has
- how we can contact you
What we commit to
- We'll acknowledge your report within 3 business days.
- We'll keep you updated while we investigate and fix the issue.
- We'll tell you when it's fixed and, if you'd like, credit you.
Please don't
- access, change or delete data that isn't yours
- disrupt our services, including denial-of-service or high-volume automated scanning
- use social engineering, phishing or physical attacks
- disclose the issue publicly before we've fixed it. Please give us 90 days.
Scope
In scope: wira-ai.orengacademy.com. For other OrenG Academy systems, email us first and we'll confirm whether they're covered.
Good-faith research
If you follow this policy, we'll treat your research as made in good faith and won't take legal action against you for it. This is not a paid bug bounty programme.
Machine-readable contact details: security.txt