1. Safe Harbor Commitment
At layer8sec, we value the security research community. If you conduct vulnerability research in good faith according to this policy, we consider your research authorized. We commit to not pursuing legal action against researchers who comply with these guidelines.
2. Guidelines for Ethical Research
- Do No Harm: Avoid destroying data, interrupting production service availability, or degrading performance for live readers.
- Privacy First: Do not access or modify personal user data. If you inadvertently encounter user data, stop research and report immediately.
- Scope: In-scope targets include primary domain
https://layer8sec.pages.devand static web assets. Out-of-scope targets include third-party hosting infrastructures, social media accounts, and Denial of Service (DoS/DDoS) attacks.
3. Reporting Channel & SLA
Please submit detailed vulnerability reports including reproduction steps, proof of concept (PoC), and potential impact to: layer8security@gmail.com
We acknowledge reports within 24 hours and aim to validate and resolve confirmed issues within 90 days.