01
Agreed scope first
We agree on the systems, the access and the questions before any testing starts. We stay inside that scope.
Trust
How we work with your systems and your data.
Security work means access to sensitive systems. Here is how we scope it, how we handle what we see, and how to report a security issue to us.
SC/TRUSTSecure Channel / Trust
ScopeAgreed up front
Who testsSenior engineers
ReportsCoverage statement
Contacthello@securechannel.ai
01 / How we test
Rules of engagement.
02
Senior people only
Senior security engineers do the work.
03
Proof for every finding
Every finding comes with evidence, reproduction steps and a recommended fix.
04
Honest coverage
Every report says what we covered and what we couldn't see.
02 / Your data
How we handle what we see.
01
Need to know
Engagement data is shared only with the people working on your sprint.
02
No model training
We don't use your data to train AI models.
03
Deleted on request
When the engagement ends, we delete engagement data on your request.
03 / Responsible disclosure
Found a security issue in our systems?
Email hello@securechannel.ai with the details and the steps to reproduce it. We will confirm we received it and keep you updated while we fix it.
To keep research safe for everyone, please:
- Give us a reasonable amount of time to fix the issue before sharing it publicly.
- Access only the data you need to show the issue, and don't keep it.
- Avoid testing that degrades our services, such as denial of service.
- Don't use social engineering or physical attacks against our people or offices.
04 / Vendor review
Running us through security review?
Email us and we'll complete your security questionnaire and walk your team through how we work.
Questions about how we work?
Talk to the people who do the work.