AESC takes security vulnerabilities very seriously and appreciates the responsible disclosure of any potential issues. If you discover a security vulnerability, please follow the guidelines below to ensure it is addressed promptly and securely.

Reporting a Vulnerability

When reporting a potential vulnerability, please:

  • Email your findings to security@aesc.org
  • Provide detailed information to help us reproduce and understand the vulnerability, including steps to replicate, potential impact, and relevant technical details.

Guidelines

We request that you:

  • Do not publicly disclose the vulnerability until it has been fixed.
  • Avoid actions that might harm AESC or our users (e.g., data modification, deletion, or unauthorized access).
  • Only test vulnerabilities on accounts or data you own.

Our Commitment

In return, AESC commits to:

  • Responding promptly to your report and working quickly to resolve the vulnerability.
  • Keeping you informed throughout the investigation and resolution process.
  • Providing acknowledgment (with your consent) for responsibly disclosed vulnerabilities.

Thank you for helping AESC keep our systems secure.