Hushfort
Menu

Report a security issue

Updated

We build a security plugin, so we take reports about our own code seriously. If you've found a vulnerability in Hushfort Security, Hushfort Pro or hushfort.com, thank you. Please tell us privately first.

How to report

Email [email protected] with "Security" at the start of the subject line.

Our machine-readable contact details are also in /.well-known/security.txt.

What to include

  • The affected product and version (Hushfort Security, Hushfort Pro or the website).
  • What the issue is and what an attacker could do with it.
  • Steps to reproduce, or a proof of concept.
  • Your WordPress and PHP versions, and any other plugins involved.
  • How you'd like to be credited, if at all.

Please don't send real customer data, passwords or keys. Test on your own site.

What happens next

  1. We acknowledge your report.
  2. We confirm the issue and work on a fix.
  3. We release the fix and note it in the changelog.
  4. We credit you, if you want to be credited.

We'll keep you updated along the way and tell you when the fix is out.

Please

  • Don't disclose the issue publicly until a fix has been released.
  • Don't access, change or delete data that isn't yours.
  • Don't run tests that degrade other people's sites or our servers.

Not a vulnerability in Hushfort?

If your site has been hacked or you're seeing attacks, that's a support question. Start with Troubleshooting or contact us. Note that Hushfort doesn't scan for or clean malware.