Security
If you find a security weakness in any Stead Software website or product, please tell us. We will work with you to understand it and fix it.
How to report
Send your report through our contact form, with the topic set to Security report. Please include:
- the product and the web address affected,
- a description of the issue and the steps to reproduce it, and
- how we can contact you.
Please do not include personal data that does not belong to you. Our security contact is also published in security.txt.
What we ask of you
- Give us reasonable time to fix the issue before you disclose it publicly.
- Do not access, change or delete data that does not belong to you.
- Do not degrade our services, for example through denial-of-service testing or high-volume automated scanning.
- Do not use social engineering or physical attacks against our people or our providers.
What we commit to
We aim to acknowledge your report within three business days and to keep you informed while we work on it. If you wish, we will credit you once the fix is public. We do not currently pay rewards for reports.
Security questionnaires
Business customers can ask for our answers to a standard security questionnaire through our contact form.