HomePrivacy PolicyRefund PolicyVulnerability Disclosure

Vulnerability Disclosure Policy

Brand Promise

VPN Proxy’s mission is to keep its users safe and anonymous online by ensuring top privacy protection. We continuously scan and test our systems and run a reliable disclosure program, asking our users to report any vulnerabilities of our service or website. We take care of every security issue report and collaborate with reporters in order to carefully analyze the findings.

Scope

Suppose you find any security or vulnerability issue in our service. In that case, we will appreciate you inform us as early as possible and not to disclose any information to third parties until we resolve the issue. Keeping this information private will help us ensure our users’ protection by preventing cybercriminals from taking advantage of the situation.

How to Submit a Report

Please follow the following steps to submit a report:

  1. Report any potential or real security and vulnerability issues to VPN Proxy by emailing [email protected]. This information can be submitted anonymously.
  2. For safer communication with us, you are welcome to use our PGP key:
    7C17 C310 2C5B 38CB B551 A8CC 9BBA F6A3 42EB 9064.
  3. Provide us with detailed information for your findings (IPs, logs, screenshots, etc.).
  4. Do not disclose your findings as for vulnerability publicly until it is fully remediated by us.

Guidelines

As soon as you submit a report, we will reply within two business days and start collaborating with you to evaluate the issue and determine our next steps.

  1. Your report will be handled in a strictly confidential way, and no details about you will be disclosed to a third party without your permission.
  2. You will be kept updated on the issue resolving progress.
  3. We will release a fixed version of the service with the resolved issue as early as possible. If it cannot be performed within a reasonable time frame, we will inform our users about the issue to avoid putting users at risk.
  4. With your permission, we will include your name in our next release notes as a contributor to the security of our (unless you do not want us to).

Next Steps

VPN Proxy acknowledges that it may take time to make the release available. The level of severity of the vulnerability, its connection to ongoing release work, and affected parts of the service determine how fast the release will become available. We do not attempt to postpone the resolution of the issue, but we ensure that all necessary fixes and improvements will be performed, the issue will be resolved, and no regressions will appear.

We are thankful for your patience and help in resolving the issue.