Legal
Responsible Disclosure
Found a security issue on this website? We would rather hear it from you.
We appreciate the work of security researchers. If you believe you have found a vulnerability in this website, please report it to us before disclosing it publicly, and we will work with you on a fix.
How to report
- Email us with a clear description of the issue and the steps needed to reproduce it.
- Include the URL, the parameter or request involved, and any proof-of-concept you have.
- Give us a reasonable period to investigate and remediate before publishing.
What you can expect
- We will acknowledge your report.
- We will keep you informed about the fix.
- We will not pursue legal action against researchers who follow this policy in good faith.
- We will credit you if you would like us to, once the issue is resolved.
What we ask
- Do not access, modify or delete data that is not your own.
- Do not run tests that could degrade availability for others.
- Stop as soon as you have confirmed the issue, and tell us.
Out of scope
- Denial-of-service, volumetric or stress testing of any kind.
- Social engineering, phishing or physical attacks against staff or offices.
- Automated scanner output submitted without a demonstrated impact.
- Missing hardening headers or configuration findings with no realistic exploit path.
- Reports about third-party services we do not operate.
In scope
This website and its administrative interface.
Contact
LMCS-Info@LM-CyberSecurity.com
We do not currently operate a paid bug bounty programme.