Skip to content

Security: arcusis/.github

SECURITY.md

Security Policy

About Us

We are Arcusis, a full-service software development company. We turn complex business problems into production-grade software — from AI platforms and enterprise systems to games and digital products. We understand the importance of security across all our products and are committed to protecting our infrastructure, services, and users' data.

Reporting a Vulnerability

We encourage responsible disclosure of any security vulnerabilities in our services or infrastructure. If you believe you have discovered a potential security issue, please get in touch with us at security@arcusis.com.

What to Include in Your Report

  • A comprehensive description of the potential vulnerability.
  • Detailed steps to reproduce the issue, including any tools, scripts, or data needed for verification.
  • Any relevant screenshots, videos, or logs.
  • Your contact information for any follow-up questions.

What to Expect After Reporting

  • Acknowledgement of your report within 3 business days.
  • An initial assessment of the report and, if applicable, an estimated time frame for addressing the vulnerability.
  • Regular updates on our progress toward resolving the issue.
  • Public recognition of your contribution to our Security Hall of Fame, unless you prefer to remain anonymous.

Security Hall of Fame

Contributors who help us identify and address security vulnerabilities are invaluable to our mission. We recognize the efforts of these individuals in our Security Hall of Fame as a token of our appreciation.

Policy Updates

Our security policy is subject to periodic review and updates to ensure it aligns with best practices and our commitment to security. We encourage you to review this document regularly.

Contact Us

For any questions regarding this policy or the security of our services, please get in touch with us at security@arcusis.com.

Thank you for your support and cooperation.

There aren't any published security advisories