Vulnerability Disclosure Policy
Our commitment
Antibody Cyber Technology, LLC takes the security of urlcybersecurity.com seriously. We welcome good-faith reports from security researchers. If you discover a vulnerability, please tell us so we can address it before it can be exploited.
Scope
In scope
- The urlcybersecurity.com website and all pages served under that domain
- Web applications and APIs directly operated by Antibody Cyber Technology, LLC
- Supporting infrastructure directly operated by Antibody Cyber Technology, LLC
Out of scope
- Denial-of-service (DoS / DDoS) attacks against our servers
- Social engineering or phishing of our staff
- Physical attacks against infrastructure
- Vulnerabilities in third-party libraries or services we use but do not control
- Reports generated solely by automated scanners with no manual validation
- Issues with no realistic security impact
How to report
Send a report to wayne@antibodynet.net with:
- A clear description of the vulnerability and its potential impact
- Steps to reproduce, including any URLs, payloads, or proof-of-concept code
- Your name or alias (optional) for acknowledgement
Please do not publicly disclose the issue until we have had a reasonable opportunity to investigate and remediate it.
What to expect
| Milestone | Target timeframe |
|---|---|
| Acknowledgement of your report | 3 business days |
| Initial triage and severity assessment | 7 business days |
| Remediation of confirmed critical / high issues | 30 days |
| Remediation of medium / low issues | 90 days |
Safe harbor
We will not pursue civil or criminal action against researchers who:
- Report in good faith following this policy
- Avoid accessing, modifying, or deleting data beyond what is needed to demonstrate the issue
- Do not perform destructive testing or exfiltrate data
- Do not disclose the vulnerability publicly before remediation
We consider good-faith security research conducted under this policy to be authorized access and will not refer such activity to law enforcement.
Recognition
We do not currently offer a bug bounty program. Researchers who report valid, in-scope vulnerabilities will be thanked by name (or alias, as preferred) in our release notes unless they request anonymity.
Contact
Security reports and questions: wayne@antibodynet.net
← Back to urlcybersecurity.com