Responsible Vulnerability Disclosure
Help us keep CyberAgest secure through responsible vulnerability reporting.
Safe Harbor
We will not initiate legal action against researchers who report vulnerabilities in accordance with this policy. We consider activities conducted consistent with this policy to constitute “authorized” conduct under the Computer Fraud and Abuse Act (CFAA).
In-Scope Targets
*.cyberagest.comcyberagest.com/api/v1- AegisGPT Core Engine
Out of Scope
- Denial of Service (DoS/DDoS)
- Social Engineering / Phishing
- Third-party services/vendors
Recognition and review
Eligible reports are reviewed based on impact and evidence quality. This policy does not promise a monetary bounty; any recognition or reward is agreed in writing on a case-by-case basis.
PGP Public Key
Please encrypt your vulnerability findings using our RSA 4096-bit OpenPGP public key:
Key ID: 0x1E5E3D911A9227D1
Fingerprint: 4DBD 94CE 5475 8A8B B668 FF97 1E5E 3D91 1A92 27D1
-----BEGIN PGP PUBLIC KEY BLOCK----- Version: CyberAgest OpenPGP v1.0 Comment: UserID: CyberAgest Security <[email protected]> xsBNBGpuZmgBCACyz3TsbYL/1Z2mw7b/y4Wccc1VX6BabvNKZf6iaxv2j1Ff19+i zgwV2NPC4VSqdIFOGcGdGx6MQQrkzs4oFbd7axAUnJTTTZ9D6DRxF8awIe12COqb RjoRSgdqKHRI7mq09RYZHaEq2Nm1Db7h46PGM7rbaga7qTf0g/CbccgaLRrR9QqA Gbt1P9fayR2rIyQbbEarfY+wfDQ17odyII0KE1eCkBydpAI5twtz1paQSKvlFYfS lxBrFkbkjRFsKBIMzkGGDeTSOXnDy5jrwZ3+AYxYnbIryACsP2QYIEhZdx77K+PN JT4y33GiUl4D/otB8XykrUWCW1A9bPAynvmzABEBAAHNLUN5YmVyQWdlc3QgU2Vj dXJpdHkgPHNlY3VyaXR5QGN5YmVyYWdlc3QuY29tPsLAUgQTAQIABgUCam5maAAA 2KgH/26eVjXnMdNwyUVJPfXPlXnyFhOtaQ4bjscZRY7z8FjTC+FtCVCq8ARUs7j3 JjNT/85s97Jef+9Tof4T5FoMrpg+7ByUkSm7AL0l2ZqzsIp8mF+c/NPgXSc33h2M xvjpzMDgheAS7j2bogo6wgQObehscbHYyXPUebw23OG7A+8xxw/9chPqyEzONmWN gudFcUQrkhrrSyl+nSJt13vkXvYwT/kp301JSAnWFCDarN57i16HLPzXcjc3Ih11 lUHmDI9XvQ0VzKfg3M7rmdyO7smzPo2Hiv/YCPvhZ63PTSWWHxKNB1xnAmolA+hq MYj4PKPyvQ/SYfe7PnflKt0a26U= =2iDC -----END PGP PUBLIC KEY BLOCK-----↓ Download Verified pgp_public.txt
To report a vulnerability, please encrypt your findings using our PGP key and email us.
[email protected]