Vulnerability Disclosure Policy

Vulnerability Disclosure Policy

Brillient Corporation accepts reports of security vulnerabilities in the systems we operate. This policy applies to internet-facing assets, including web applications and associated infrastructure, owned or operated by Brillient Corporation.

How to report vulnerabilities

Email ITsecurity@brillient.net.

Please include:

  • Submission title (A short title of the vulnerability or email subject line)
  • Location (Servername/URL/Application)
  • Any technical information on how to reproduce
  • Potential impact
  • Description of vulnerability (Help us get an idea of what this vulnerability is about)
  • Additional Context
  • Email of reporter
  • Company (if applicable)
  • Your contact details, if you would like a response

What to expect

We acknowledge reports within three business days, review them, and address confirmed vulnerabilities.

What we ask

  • Do not disclose the vulnerability outside of this Vulnerability Disclosure Program
  • Do not violate any laws
  • Do not disrupt services
  • Do not access, modify or destroy any accounts or data that does not belong to you
  • Do not introduce malicious or monitoring software
  • Give us a reasonable opportunity to respond

Legal Considerations

We do not authorize any activities that violate applicable laws, regulations or guidelines in this policy. Reporters must respect the legal boundaries of their actions.

Exclusions

This policy does not cover social engineering attacks, phishing attempts, or any actions that could compromise the privacy and security of our users.