Perfai

    Ethical Security Research

    Responsible Disclosure Policy

    Purpose

    At Perfai Security, we are a dedicated security research and testing organization focused on improving the security posture of SaaS, web, and mobile applications. Our mission is to identify, validate, and responsibly disclose vulnerabilities to help companies strengthen their systems and protect their users.

    Scope of Research

    Our research activities include:

    — Application security testing (web, mobile, Apps, cloud-based SaaS). — Vulnerability scanning and analysis using ethical and non-intrusive methods. — Responsible outreach to organizations when potential security weaknesses are discovered.

    All testing and analysis are performed for legitimate research and defensive purposes only. We do not exploit, misuse, or publicly disclose vulnerabilities before proper coordination and remediation have occurred.

    Ethical Principles

    No unauthorized exploitation: We do not engage in or encourage malicious exploitation of systems.

    Confidentiality: All findings are shared privately with verified representatives of the affected organization.

    Transparency: Our intent is always to inform, assist, and improve — not to harm or profit from discovered issues.

    No extortion or demands: We never request, require, or expect monetary compensation as a condition for disclosure or assistance.

    Disclosure Process

    When a potential vulnerability is identified, we document it responsibly with clear technical details.

    We contact the appropriate security or support channel of the affected company (typically via email).

    We offer to share full details under responsible disclosure terms and assist in confirming and remediating the issue.

    Public disclosure (if applicable) only occurs after the issue is fixed or with the affected company's explicit consent.

    No Obligation or Liability

    Our outreach is voluntary and for the purpose of security enhancement. We do not assume liability for any damages arising from our research or from how the disclosed information is used. Organizations receiving such reports are under no obligation to engage our services or compensate us financially.

    Contact Information

    For any inquiries related to our research or responsible disclosure reports, please contact:

    security-research@perfai.ai