Vulnerability Disclosure

Report a suspected security issue responsibly.

Use this route for good-faith research that avoids harm, privacy intrusion, service disruption, and access beyond what is necessary to describe the issue.

Last updated 4 September 2026Public reporting route available · formal response targets under review
What to include

Give us enough context to investigate safely.

  • ✓Affected URL or product area
  • ✓Observed and expected behavior
  • ✓Approximate time and account context
  • ✓Minimal reproduction steps
  • ✓Potential impact
  • ✓A safe contact route for follow-up
Research boundaries

Avoid harm and do not retain unrelated information.

  • ✓Do not disrupt availability, destroy data, send malware, phish, or use social engineering.
  • ✓Do not access another person's account or data, persist after demonstrating the issue, or publish live secrets.
  • ✓Do not run automated high-volume scanning or test third-party services without separate authorization.
What happens next

We review reports and address issues according to risk.

Allocyn will seek a safe way to reproduce and address a valid issue and may ask for more detail. No fixed acknowledgment or resolution time is currently promised.

Good-faith reporting

We welcome careful research within this policy.

Innovative Logix does not intend to pursue action against a researcher solely for a good-faith report that follows these boundaries and applicable law. This statement does not authorize access to third-party systems or create immunity from unlawful conduct.