Vulnerability Disclosure Policy
How security researchers can responsibly report vulnerabilities to us.
Effective 6 September 2026
Zorvetska Limited welcomes reports from security researchers and the public that help us keep our products and users safe. This policy explains how to report a vulnerability and what you can expect from us.
1. Scope
This policy applies to the Zorvetska website and our products, including FinSight, BuzSight AI, and CustomerSight AI. It does not authorize testing that could harm systems, data, or users.
2. How to Report
Please report suspected vulnerabilities to [email protected]. Include a clear description, steps to reproduce, and any supporting evidence such as screenshots or logs. Do not include more sensitive data than is necessary to demonstrate the issue.
3. Responsible Disclosure Guidelines
- Act in good faith and avoid privacy violations, data destruction, or service disruption.
- Do not access, modify, or exfiltrate data that does not belong to you.
- Do not publicly disclose a vulnerability until we have had a reasonable opportunity to remediate it.
- Only interact with accounts you own or have explicit permission to test.
4. Our Commitment
- We will acknowledge receipt of your report promptly.
- We will investigate and work to remediate valid issues in a timely manner.
- We will not pursue legal action against researchers who act in good faith and comply with this policy.
- We are grateful for responsible disclosure and will recognize contributions where appropriate and with your consent.
5. Contact
Security reports should be sent to [email protected].