1. Reporting a security concern
We welcome responsible reports of suspected security vulnerabilities affecting Falconry360 websites or systems owned or controlled by Falconry Ltd or the relevant Falconry group entity.
Please email contact@falconry360.com with the subject line Security Report.
2. Scope
This disclosure process is intended for security issues in Falconry360 websites, applications and platform components owned or controlled by the relevant Falconry group entity and made publicly accessible or available for authorized use.
Third-party systems, customer environments and services not controlled by Falconry are outside scope unless Falconry expressly confirms otherwise.
3. Good-faith testing rules
When researching or reporting a potential issue, please:
- Avoid accessing, copying, changing or deleting data that does not belong to you.
- Do not disrupt availability or conduct denial-of-service testing.
- Do not use social engineering, phishing, physical intrusion or credential attacks.
- Use the minimum testing necessary to demonstrate the issue.
- Stop testing and report the issue if you encounter personal, confidential or customer data.
- Comply with applicable law and any access terms that apply to the system.
4. What to include
To help us review the issue, include where possible:
- Affected URL, application or component.
- A clear description of the suspected vulnerability.
- Steps needed to reproduce it.
- Potential impact.
- Relevant screenshots, logs or proof-of-concept information that does not expose unnecessary data.
- Your preferred contact details.
5. What to expect
Falconry will review reports in good faith and may contact you for additional information. Response and remediation time will depend on the nature, severity, reproducibility and scope of the issue.
This page does not create a guaranteed response or remediation service level, and Falconry does not offer a bug bounty unless separately agreed in writing.
6. Public disclosure
Please allow Falconry a reasonable opportunity to investigate and address a reported issue before public disclosure. Where appropriate, we may coordinate disclosure timing with the reporter.
7. Contact
Security reports: contact@falconry360.com