We appreciate the security research community's efforts in helping us maintain the security of our platforms. Report vulnerabilities responsibly and help us protect our users.
Our commitment: We'll acknowledge your report within 2 business days
Thank you for helping us maintain the security of our platforms. Before submitting a vulnerability report, please review our responsible disclosure guidelines, response timelines, and scope requirements below.
Please read all sections carefully
Understanding our guidelines ensures your report is processed quickly and appropriately. After reviewing, you'll be able to submit your vulnerability report.
We're committed to working with security researchers to protect our users. We ask that you:
To help us understand and reproduce the vulnerability quickly, please include:
We follow a structured process to handle vulnerability reports:
| Stage | Timeline | Description |
|---|---|---|
| Acknowledgment | 2 business days | We confirm receipt and provide a reference ID |
| Initial Assessment | 5 business days | We validate and assess the severity |
| Remediation | Varies by severity | Critical: 7 days | High: 30 days | Medium: 60 days | Low: 90 days |
| Public Disclosure | Coordinated | We coordinate disclosure timing with you after remediation |
Timelines may vary based on complexity and impact. We'll keep you updated throughout the process.
We acknowledge and thank security researchers who have helped us improve our security through responsible disclosure.
No public vulnerabilities have been reported yet. Your name could be here! We're grateful to security researchers who help us protect our users.
The following issues are generally out of scope for our vulnerability disclosure program:
If you're unsure whether an issue is in scope, feel free to reach out to us at security@newhorizoncode.io.
Responsible Disclosure Agreement:
By continuing, I agree to follow responsible disclosure practices and will not publicly disclose this vulnerability until New Horizon Code has had a reasonable opportunity to investigate and address it. I understand this report will be handled confidentially and with high priority, and I confirm that I have read and understood the responsible disclosure guidelines, response timeline, and scope requirements outlined above.
Your report will be encrypted in transit and handled confidentially