Responsible Disclosure

We consider the security of our systems a top priority. Despite our efforts, vulnerabilities can still occur. If you discover one, please let us know so that we can protect our clients and systems.

Please do the following

• E-mail your findings to info@newheap.com.
• Do not exploit the vulnerability, access more data than needed, or alter or delete data.
• Do not disclose the problem until it has been resolved.
• Do not use physical attacks, social engineering, DDoS, spam or third-party applications.
• Include enough information to reproduce the issue, such as the affected URL or IP address and a clear description.

What we promise

• We respond within three business days with our evaluation and expected resolution date.
• When you follow this policy, we will not take legal action regarding your report.
• We handle your report confidentially and keep you informed of progress.
• We credit you publicly only if you want us to.