Responsible Disclosure Policy
ByteLite values the security community and believes that responsible disclosure of security vulnerabilities helps us ensure the security and privacy of our users.
Scope
This policy applies to any vulnerabilities discovered in:
- ByteLite compression technology
- Deep Kore systems and infrastructure
- Our websites and web applications
- Our APIs and backend services
How to Report
If you believe you've found a security vulnerability, please email us at:
What to Include
- Description of the vulnerability
- Steps to reproduce the issue
- Potential impact
- Any proof-of-concept code
- Your contact information
Our Commitment
- We will acknowledge receipt within 48 hours
- We will provide an initial assessment within 7 days
- We will keep you informed about our progress
- We will credit you (if desired) when the issue is resolved
Please Don't
- Access or modify user data without permission
- Perform actions that could harm our services or users
- Publicly disclose the issue before we've addressed it
- Demand compensation or rewards
Recognition
We appreciate the security community's efforts in helping us maintain the highest security standards. With your permission, we'll acknowledge your contribution in our security hall of fame.
Legal Protection
We will not pursue legal action against security researchers who:
- Follow this responsible disclosure policy
- Act in good faith
- Do not cause harm to our systems or users