Vulnerability Disclosure

How to report

Email contact@emergences.ai with a description of the issue, the steps to reproduce it, its potential impact, and any proof-of-concept. Our security contact details are also published at https://hiring.neo-work.ai/.well-known/security.txt.

Please do

• Report as soon as you can after discovery.
• Give us reasonable time to investigate and fix before any public disclosure.
• Only interact with accounts you own or have explicit permission to test.
• Avoid privacy violations, data destruction, and service disruption.

Please don't

• Access, modify, or delete other people's data — especially candidate personal data.
• Run denial-of-service, spam, or social-engineering attacks against our people or users.
• Publicly disclose a vulnerability before we have addressed it.

Our commitment (safe harbor)

If you make a good-faith effort to comply with this policy, we will not pursue or support legal action against you for your research, we will work with you to understand and resolve the issue promptly, and we will acknowledge your contribution if you wish. We aim to acknowledge reports quickly and keep you informed of our progress. [Counsel to finalize the safe-harbor wording.]