Vulnerability Disclosure Policy

Introduction

RemoteInside values the security of our users, products, and services. We recognize the important role that independent security researchers play in keeping the internet safe. We welcome responsible disclosure of any vulnerabilities that may be found in our platform. We are committed to working with security researchers to verify and address potential issues as quickly as possible.

Disclosure Policy

If you believe you have found a security vulnerability in RemoteInside, we encourage you to report it to us as soon as possible. Please follow these guidelines:

• Submit your report via email to security@remoteinside.com.
• Include a detailed description of the vulnerability, including steps to reproduce the issue.
• Provide any relevant screenshots, proof-of-concept code, or supporting materials.
• We will acknowledge receipt of your report within 5 business days.
• We will work with you to understand and validate the issue.
• Please allow a reasonable amount of time for us to investigate and address the vulnerability before making any public disclosure.

What We Ask

To protect our users and services, we ask that you:

• Act in good faith to avoid privacy violations, data destruction, or disruption of our services.
• Do not access or modify data that does not belong to you.
• Do not perform actions that could negatively impact RemoteInside or its users (e.g., denial of service, spamming, or brute-force attacks).
• Do not publicly disclose the vulnerability before we have had a reasonable opportunity to address it.
• Only interact with accounts and data that you own or have explicit permission to test.

Exclusions

The following activities are explicitly out of scope for this policy:

• Denial-of-service (DoS/DDoS) attacks
• Spamming or sending unsolicited messages
• Social engineering or phishing attacks targeting RemoteInside staff or users
• Physical attacks against RemoteInside facilities or infrastructure
• Automated vulnerability scanning that generates excessive traffic
• Attacks against third-party services that integrate with RemoteInside

Our Commitment

When you report a vulnerability in good faith and follow this policy, we commit to:

• Not pursuing legal action against you for security research conducted in accordance with this policy.
• Working with you to understand and resolve the issue promptly.
• Keeping you informed about the progress of the remediation.
• Crediting you (if desired) when we publish information about the resolved vulnerability.

Changes to This Policy

We may update this Vulnerability Disclosure Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact

To report a vulnerability or ask questions about this policy, please contact us: