Disclosure
Security & Vulnerabilities
We appreciate responsible reports from security researchers that help us keep CloakScan and our users safe.
How to report
If you believe you have found a security vulnerability, please send the details directly to our security team. We will investigate all legitimate reports.
security@cloakscan.comPlease include in your report:
- Affected URL(s) and environment
- Step-by-step reproduction instructions
- Expected versus observed behavior
- Potential impact of the vulnerability
- Proof of concept (if available)
Scope and Rules
Guidelines for testing our infrastructure responsibly.
- Test only assets owned by CloakScan.
- Do not access, modify, or delete user data.
- Do not use social engineering, phishing, or physical attacks.
- Avoid service disruption (DoS/DDoS, brute force).
Response Targets
What you can expect from our team after submitting a report.
Initial triage Within 3 business days
Status updates At least weekly
Note on Bounties
We currently do not run a public paid bug bounty program.
Ready to protect your sites?
Start monitoring in minutes.
Free includes 1 site and 5 manual scans per month. No credit card required.