Vulnerability Disclosure
Security issues are handled as a priority, not a normal support ticket.
Reporting
Section titled “Reporting”Contact GovConHouse support and state that you are reporting a security issue. Include:
- What you observed.
- The affected page or endpoint.
- Steps to reproduce, if you have them.
- Any proof (screenshots, requests) you can share.
What to expect
Section titled “What to expect”- We acknowledge security reports as soon as they are reviewed.
- We aim to confirm and triage within a few business days.
- We will not pursue action against researchers acting in good faith.
What we ask
Section titled “What we ask”Please do not access another customer’s data while investigating, do not exploit an issue beyond what is needed to confirm it, and do not make an issue public before it is fixed.