Responsible Disclosure Policy

At WhiteStone Technology, the security of our systems and our customers’ data is a priority. If you have found a vulnerability in our website or in Calibry, please let us know so that we can fix it as quickly as possible.

How to report

Email security@whitestonetechnology.com including:

– The affected URL or system.

– A description of the issue and the steps to reproduce it.

– Screenshots or evidence that help to understand it, if available.

What we ask of you

– Do not exploit the vulnerability beyond what is needed to demonstrate it.

– Do not access, download, modify or delete data that is not yours. If you accidentally access third-party data, stop and notify us.

– Do not publicly disclose the issue until we have resolved it.

– Do not carry out denial-of-service, social engineering or physical attacks, spam or high-volume automated testing.

– Do not test against third-party services we use (hosting, email providers, etc.).

– We do not accept reports generated solely by automated tools without a demonstration of real impact.

Our commitment

– We will acknowledge your report within 5 business days.

– We will keep you informed of progress until the issue is resolved.

– We will treat your report and personal details as confidential and will not share them with third parties without your consent.

– We will not take legal action against you if you have acted in good faith and in accordance with this policy.

Rewards

We do not offer a monetary reward programme. If you wish, we will publicly credit you as the discoverer once the issue has been resolved.