Scorpion Software

Our team works vigilantly to protect our customers and their information assets impacting by our software. We recognize the important role that security researchers and our user community play in keeping Scorpion Software and our customers secure. If you discover a site or product vulnerability please notify us using the guidelines below.

To encourage responsible disclosure, we commit that – if we conclude that a disclosure respects and meets all the guidelines outlined below – we will not bring a private action or refer a matter for public inquiry.

We strongly encourage anyone who is interested in researching and reporting security issues to observe the simple courtesies and protocols of responsible disclosure.

##Guidelines for responsible disclosure

• Share the security issue with us before making it public to peers, on message boards, mailing lists, and other forums.
• Allow us reasonable time to respond to the issue before disclosing it publicly.
• Provide full details of the security issue, and be open to describing how you found it so we may reproduce the conditions.
• Understand that many services we use are not under our control. Reporting vulnerabilities in Azure Websites (think header info), TyepPad or HubSpot will be forwarded to the corresponding partner companies. We will not be triaging such cases past that.