Browse docs

/pages/vdp

Security

Vulnerability Disclosure Policy

Responsible disclosure guidance for researchers reporting potential security issues.

1. Overview

Security is a top priority for us at niwo. We appreciate the work of security researchers and the responsible disclosure of potential vulnerabilities.

2. Scope

This policy applies to digital assets owned, operated, or maintained by niwo, including niwosystems.com and associated subdomains.

3. Guidelines

  • Do not exploit vulnerabilities beyond what is necessary to demonstrate them.
  • Do not access or modify user data without consent.
  • Do not disrupt or degrade our services.
  • Provide sufficient detail so we can reproduce and validate the issue.

4. Reporting

If you discover a vulnerability, please report it responsibly by emailing security@niwosystems.com.

Include the following information where possible:

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact
  • Suggested remediation, if available

5. Acknowledgement

We may publicly acknowledge valid reports that help us improve our security posture. Thank you for helping keep niwo and its users safe.