Responsible Disclosure Policy

We take security seriously and appreciate the efforts of security researchers who help us keep our platform and users safe. If you believe you have found a security vulnerability, we encourage you to report it responsibly.

Email your findings to security@faststaq.com. Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggestions for remediation

• We will acknowledge receipt within 2 business days
• We will provide an initial assessment within 5 business days
• We will keep you informed of our progress
• We will not take legal action against researchers acting in good faith
• We will credit researchers who wish to be acknowledged (with consent)

This policy covers vulnerabilities in:

• Our web application and API
• Authentication and authorization systems
• Data handling and storage

• Social engineering attacks against our employees
• Denial of service attacks
• Physical security of our offices or data centers
• Issues in third-party services we use

Thank you for helping us keep FastStaq secure.