REPORT SECURITY ISSUE.

We Value Your Concerns

 

We value your privacy, and aim to keep your information private and secure. We appreciate all security concerns brought forth and are striving to keep on top of the latest threats. Being pro-active rather than re-active to emerging security issues is a fundamental belief at Falcon.io. Every day new security issues and attack vectors are created. We strive to keep abreast on the latest state-of-the-art security developments. If you have discovered a potential security issue with our product, we kindly ask you to let us know as soon as possible.

 

How To Report Security Issues

 

When reporting potential issues, please try to be as thorough as possible providing us enough information so that we can recreate your findings. Make sure you include a code sample and screencast that clearly demonstrates the exploit you have found. If you are using automated tools to find vulnerabilities, please be aware that these tools always report false positives. Most times, it is insufficient to simply find the vulnerability and point us to an FAQ on the subject: you should show us how it can be used to impact user data or our systems. As an example, if you find a clickjacking vulnerability please clearly show us what end user sensitive action the end user can be tricked into performing.

 

Where to report Security Issues

 

Please summarise your findings in an email to [email protected] It is possible to encrypt the email by using our PGP Public Key.

 

—–BEGIN PGP PUBLIC KEY BLOCK—–
mQINBFjY+9cBEADLoH9gh3JurF5gMelI73iMvaCAs2vfnEOBqQcvyG2C/cuD01XL EN3BmSN/RccU5rzxIUlAreok1cSN6O4e34vfppfLO8WdH3SK2mWlhoZi1q5Dsiik 1rfYvW82N3dtWIJrzVTVkgSC6xKpi7qqjgDK79853uNb80C+TK/Mn8r7t3a+oQ41 Q3juvbuuEhGf4lM+QGEQkZL8qgHzgjoJAaIri6Ky1RltzLJ6RIapPBCpPVygUra2 cZ8Q3RmlIQnSrQt/J9Z8pc2GPxXqNs9qUgOmRkQFyIgFJLGWtlLptyq0oNhG1llE oJZKienTcFzIKC+mTQGimLl9dVBsVmv0nQr32TxsvK3I4Pn8vZpmlU10KIhrLeen ioCOH1b/JBCjbVnjGwS5JSTf+OR+jIbSXXQDvMpvvV1P8hRevrDd0TUpF/YFukIT MbrtSC1hc6Gxb8ydfctZnYMMg11/kIVmauddgE+eJqbGOQuNTJbf2GqNsI15tyCD DkBfGoB3tkaHotHPFa6i0whNbsRdxT0EA1KJ9lMlKIz8RI0r3I4s1pIJXfEL5wdU FSpWnzMR/tYG7HqLaQ6yHrvOnmRk3JkI0pUAvzillMvoWSGUOf56OgAt32f2uOA8 0YhcWHlaN0X5LMWHnOCHP7gUT2RLqlzTCgTapXZ9sQ+c3wtXe11174e0wQARAQAB tCZTZWN1cml0eSBAIEZhbGNvbiA8c2VjdXJpdHlAZmFsY29uLmlvPokCTgQTAQgA OBYhBARL+nmGx14YbJjt51OFlDU51UpFBQJY2PvXAhsjBQsJCAcCBhUICQoLAgQW AgMBAh4BAheAAAoJEFOFlDU51UpFVkgQAKbv4Gn/iKzQ4uHlkXLBc+Igco6CAc5p Hp+531L8yFl4kjTro6Z6g/eQNbotBcnQrSKOdwFXPm3xShugh7uc4pen39L+LThG bIbrle4X6EmcPHP4MEt2S7ZV2n/cB1RG5QfDqInD5FpnQynXP4ab2/FD0PMGR64D MjMHTO672T9bYn/cCl1kOuYZ5K0Od+GW/X6pNAiEm+EmIaI3OoYax8YXcAgdelt/ SJ93m0m/+fkX/pLKH4OBLoOijuqAKBOEB4EqKbdYmrpZewqzarZLJMuA6c1yXBaf 6HEWGrFd5OhHmnhKcp2Y/9g5yl19MNCo+a8MQtBdVzs28ojuFz3l0pLltxtwGNIE C7A8xpB7WFQXh3McrwInywZaPFx/ucqo0lZMhTeF6ervHbvJb782SxFO0dArbQhP WP/8RbScn/Db6tsoW8XaHeOkp2da7msSy+6f3eXgthdFFVtJB+YE7RXYUXsXvWun jg9JBxFcj+sAqckvIF0Z9gxyNWDlKHIuyif6QeJ34HbX9CXM4FP9Al0eA46KHIkR vQQXwex1AJHd/c3RbGEKrT/ZxFqme165uBM1nlMsrkxcEu/RyfyaQEjHZjOHFwEn wkKAX+6bfrzVR+V/ZQWKjENToTBI3+OBxNy7pTxvK9SqvcJblzdCCVi1GuM1Q5lf 9HCZ0+qEjAa1uQINBFjY+9cBEAC2JprFFNVEXa9eQzjx6SsG+RiMJxd/HJ0n3GN2 v4zdmIk68uOevSSQbOOyildf3FFR8qAVWYNyLn21BTFMV7DyggXlaISK/wNRne3m bK6f9Skpe8ZexX8gsg6YLOXRcslayyj7krXo6oNzk0F4PAKbwAQRLZJGaEBpShe/ d1xOBJ1HvwrFoW3BaS28L7T3AAx/InPh1/ciIBr2KRLpWTpeIWUGthsZLZ9tRVYL aqZdDliLvm+Csd3YYPU0AZ0jTMejLAxv/jX/JfHVefcAGcbaBEQYq+zpEwPdHfuT xeo+bA5xjznVrbIYdFYCiGYD4on/rKtCzmw8RUuhwaxNEBznURh7J9zRE6fZ0MFD MJoAlywNKJhr8wm1AvT+QumeaJu/fNW2I/tctqP5O03DoMOuRjBu8VCGQ+OwDooZ FHK99X62o1MsFckfDh6ZmAsTvfC8Fm2C+Mvlxt8420GPu3gVhXvTxPqqvsmsyudj 7a1AkGB6OsU6XO/+zfZm6BKLzZz6QMSUeb41Wu7t85rsvesmKdsC6rdbfwsR6xjS 6sezYsk0rtER/XFYXUNSBr4LX55b3il/OG94qUvuL7LWIi+y4Fsiv7/KukWPgLjY 2d9GUxSduvfzB2rsJpZOnf1ujgQ3UD6xGxlrY5baYVo9Wadd1xXV4kVrn2x86ThT QC3nvwARAQABiQI2BBgBCAAgFiEEBEv6eYbHXhhsmO3nU4WUNTnVSkUFAljY+9cC GwwACgkQU4WUNTnVSkUyZQ/+LCLfe+Uql5AYBLdNvG0LgHz3iW8zE09VbkDB7YfR BEUYwrXqs/LIC53PM8pEXtgBVV2F0/QXzw2+AgkhYN/IreNFzc+3Z/Q9kRTV2uXs uWmi0HvITlSp8nR/00aGXMTL3aVfRu0cAlUVwFsVLR85zyoS/bK+gZSEF5bjj1RO 8NMPupbS7vV3pHCc+1Zss/h55MHSWQLqeea2KJYspeqSJbdttXHtshFE/5P8ewuf aU+ggc2q/B3yT8SVHAY+jNjFtmLNiaAysA/2u7LxlfmelpvRN+eoApwhRLd4Z1qD iqu6d3z1kx4cmFZUqGfs2X7zsFzfGiFnllag4Am0DD4FRP2ZEa6313A31bs+5QMR Ms+GvxFfnInhRennE5uEJ0wo/zG1VnlkBJ8zbmEwHBLwxV8ivVIi4aXpESdOpWN2 7k4h6BZyGxVE7chNpy0Q3toOhhIA5rO03nJPm/UfeEygusyLt2dtPz6jvyMRhmeB 4eot0Od7iqdCweSnKff31kxxmtiIYBx92j7S5dVVjMWcKMMgO4urvp/lizQbTmUe dUERNJvyGeVkJYeLNEHsM89egogM4LwK4STGbEV8pwm2P6ouZrarjetIj9febe0n 8NKmo4ThF0sZBqEtaPO7XbpFYatn3E0k+HjHAqCiXqYpQ4epT4la9Efv5j813656
mgE=
=45×3
—–END PGP PUBLIC KEY BLOCK—–

 

What Happens Afterwards?

 

Once you have submitted a security concern, we commit to the following:
1. We will immediately take steps to identify if the concern is a legitimate issue and determine its severity.
2. We will contact you about our investigation and progress