Vulnerability Disclosure Policy

Thank you for taking the time to seek out this page and report a potential vulnerability!

As an information and cybersecurity testing vendor, we take security issues seriously and recognize the importance of working with vulnerability researchers in a fair and non-threatening manner. We are committed to a coordinated and safe disclosure of bugs and security issues in our software or process, those of our clients, and of other parties. Whether you are a client of PEN Consultants, or looking for a trusted intermediary, we are here to help and make the process as smooth and enjoyable as possible.

To start the process, simply Contact Us. Please do not include any of the vulnerability details with your initial communication. A simple, “I found a vulnerability in one of your systems” type message is sufficient. At that point, we’ll reach out to you to coordinate the best and easiest method for us to exchange the details in a secure manner.

Thanks, again! We look forward to receiving your report!