Engineerica is committed to maintaining the security and integrity of our products and services. We appreciate the efforts of security researchers who report potential vulnerabilities in a responsible manner.
Scope
This policy applies to security vulnerabilities discovered in Engineerica products and services, including Accudemia and related platforms.
Responsible Disclosure Guidelines
If you believe you have identified a security vulnerability, please report it to us privately and allow reasonable time for investigation and remediation before any public disclosure.
When reporting a vulnerability, please:
- Provide clear, detailed steps to reproduce the issue
- Include relevant screenshots, logs, or proof-of-concept material where appropriate
- Avoid accessing, modifying, or exfiltrating data beyond what is necessary to demonstrate the issue
- Avoid disruption of service, degradation of performance, or testing that impacts other users
Testing Restrictions
Security testing must be conducted only on accounts and data you are authorized to use. Testing that impacts other users, institutions, or data without explicit authorization is not permitted.
Communications
We request that all communications related to vulnerability reports remain professional and constructive. Reports accompanied by coercion, threats of public disclosure, or demands for compensation may not be engaged.
Rewards and Recognition
Engineerica does not operate a formal bug bounty program. Any discretionary recognition or acknowledgment is evaluated independently and at Engineerica’s sole discretion after review and remediation.
Disclaimer
Submission of a vulnerability report does not grant authorization to perform further testing, access restricted data, or bypass security controls. Engineerica reserves the right to take appropriate action in response to activity that violates applicable laws, institutional policies, or terms of service.
Thank you for helping us keep our platforms secure.
