SECURITY · RESPONSIBLE DISCLOSURE
Vulnerability Disclosure Policy
As a company that proves code is safe, ProveLabs welcomes good-faith reports from security researchers about our own products and services. Report under the policy below and we will review it promptly.
How to report
- Email: woohyunchoi@provelabs.co.kr
- Machine-readable: /.well-known/security.txt (RFC 9116)
- Including reproduction steps, impact and, where needed, a PoC speeds up review.
In scope
provelabs.co.krand its subdomains- Products and services provided by ProveLabs
Please do not
- Run denial-of-service (DoS/DDoS) attacks or anything that harms service availability
- Access, modify or delete other people's data, or leak personal information
- Use physical attacks, social engineering or spam
- Attack third-party services
Our commitment (Safe Harbor)
- We will not take legal action against research that follows this policy in good faith.
- Reports are kept confidential, and the disclosure date is agreed with you.
- We aim to acknowledge receipt within 5 business days.
This policy may be revised without notice. The latest version is always on this page. The Korean version is authoritative.