Reporting a security issue
If you believe you have found a security vulnerability affecting this website or a 901Cyber service, email security@aegisgrid.security with a clear description, reproduction steps, and the affected location. Please do not include unnecessary personal data or customer information.
Good-faith research
We support good-faith research that avoids privacy violations, service disruption, data destruction, social engineering, automated high-volume testing, and access beyond what is needed to demonstrate an issue. We will not pursue legal action for research that follows these principles and applicable law.
What to expect
We aim to acknowledge credible reports promptly, investigate them with appropriate priority, and share status updates when practical. Resolution timelines vary based on severity and complexity. Please allow us reasonable time to remediate before public disclosure.
Scope and limitations
This process covers systems and services operated by 901Cyber. Third-party products, denial-of-service testing, physical attacks, spam, and reports that rely only on automated scanner output without a demonstrated impact are outside scope.