Responsible Disclosure Policy

RANSOMWATCH takes the security of our systems and the privacy of our data seriously. If you believe you have found a security vulnerability in our platform, we encourage you to let us know right away.

How to Report

Please email security@ransomwatch.org with the details of the vulnerability.

Scope

  • Web Application (ransomwatch.org)
  • API Endpoints (*.ransomwatch.org/api)

Our Promise

  • We will acknowledge your report within 24 hours.
  • We will provide an estimated timeline for the fix.
  • We will not pursue legal action against researchers acting in good faith.