Report a vulnerability
If you think you have found a security problem on this website, please email info@technocul.ie with the subject “Security report”. Please include:
- what you found and where (the page or address)
- the steps needed to reproduce it, and what you expected to happen
- what you think the impact is
- how we can reach you for follow-up questions
Please do not include real personal data in your report. If you have already come across some, tell us and we will explain how to share it safely.
What we ask of you
- Act in good faith, and stop as soon as you have shown a problem exists.
- Do not access, change, copy or delete data that is not yours.
- Test only this website. Do not try to overload it, send spam, use social engineering or test anyone’s physical security.
- Give us a reasonable time to fix the problem before you share details publicly.
What you can expect from us
- We aim to acknowledge your report within five working days.
- We will keep you informed while we look into it, and tell you when it is fixed.
- We will credit you for the finding if you would like us to.
- We will not take legal action against research that follows these guidelines.
We do not run a paid bug bounty programme.
Out of scope
- Reports from automated scanners without a demonstrated impact
- Missing best-practice settings that have no realistic security impact
- Problems in third-party services we do not control
- Social engineering, phishing or physical attacks
- Denial-of-service testing
How we approach security
Security is part of how we design and build, for this website and for client software: access controls around real roles, validation of everything that comes in, careful handling of personal data, tested backups and regular updates. You can read more about how we work on our approach page.
This policy is also published in the standard security.txt format.