At AP Sensing, the security of our products and services is our top priority. If you discover a vulnerability, we would appreciate it if you let us know as soon as possible so we can investigate and resolve it promptly.
We Appreciate Your Cooperation With the Following Guidelines
- Please send an email with your findings to security@apsensing.com . If possible, we recommend using our pgp-key.txt to encrypt the email. Include enough detail to help us understand and reproduce the issue.
- We ask that you do not take advantage of the vulnerability beyond what is necessary to demonstrate it. This includes avoiding actions such as accessing excessive data, modifying or deleting data, or uploading and executing code.
- To allow us to address the issue responsibly, please refrain from disclosing the vulnerability to others.
- We also ask that you avoid testing methods involving physical security, social engineering, denial-of-service attacks, spam, or the use of third-party applications.
What We Promise
- We will respond to your report within 3 business days with our evaluation of the report and an expected resolution date.
- If you have followed the instructions above, we will not take any legal action against you in regard to the report. This does not apply if there are recognizable criminal or intelligence-related intentions.
- We will handle your report privately and do not pass your personal details to third parties without your permission.
- We will keep you informed of the progress towards resolving the problem.
We value the efforts of security researchers who responsibly report vulnerabilities to us. Please note, however, that we do not offer monetary compensation or other rewards for security findings. Reports are submitted on a voluntary basis and help us continuously improve the security of our systems.