Disclosure Policy

Apr 4, 2020

I maintain the following policy of responsible disclosure.

  • I will publish the vulnerabilities I found or discover in my personal website via https://warengonzaga.com.
  • All vulnerabilities I found or discover will be automagically publish if no response received from the company or author of the vulnerable product or system within two weeks of initial report.
  • If response received, disclosure is coordinated with company or author who owns the product or system.