Trust Centre
Security vulnerability disclosure
If you believe you have found a security vulnerability in InsightOS, please report it privately so we can assess and investigate it.
How to report
Email support@insightos.co.uk with the subject line “Security vulnerability report”. Include enough detail for us to understand and safely reproduce the issue.
A useful report can include the affected URL or component, a description of the suspected issue, steps to reproduce it, potential impact, and relevant screenshots or request details. Do not include real customer personal data or secrets in your report.
Responsible disclosure expectations
- Do not access, alter, download or disclose another person's data.
- Do not disrupt services, perform denial-of-service testing, or use destructive techniques.
- Do not publicly disclose the suspected vulnerability before giving InsightOS a reasonable opportunity to investigate and respond.
- Stop testing and report promptly if you encounter personal or confidential information.
This is a disclosure contact, not a bug bounty programme. No payment or response-time commitment is offered.
What happens next
InsightOS will assess reports and investigate suspected issues as appropriate. The documented incident response process includes assessing and containing affected systems or accounts, investigating cause and scope, taking remedial action and notifying affected customers or regulators where legally required. We may contact you for clarification. Please use the email above for follow-up.