Responsible Disclosure

Reporting a vulnerability

If you believe you have discovered a security vulnerability in Remvx software or infrastructure, report it to our security team. We ask that you:

• Report findings to [email protected] with sufficient detail to reproduce the issue (also published in /.well-known/security.txt)
• Allow reasonable time for investigation and remediation before public disclosure
• Do not access, modify, or delete data belonging to other customers
• Do not perform denial-of-service attacks or social engineering against Remvx staff

What to include

• Description of the vulnerability and potential impact
• Steps to reproduce, including affected component (Agent, Console, API)
• Your contact information for follow-up
• Whether you are reporting on behalf of a customer organization

Our commitment

Remvx LLC investigates good-faith security reports and will acknowledge receipt within a reasonable timeframe. We do not pursue legal action against researchers who comply with this policy and act in good faith.

We do not operate a public bug bounty program at this time. Scope and acknowledgment timelines are communicated to reporters during investigation.

Contact

Report a vulnerability