Responsible Security Disclosure Policy

At BabySafeGate, we take the security of our website and our customers seriously. If you discover a potential security vulnerability affecting babysafegate.com, we encourage you to report it responsibly.

We appreciate the efforts of security researchers who help us improve the safety of our website. All legitimate reports will be reviewed, and verified issues will be addressed as quickly as reasonably possible.

SECTION 1 – CORE PRINCIPLES

If you act in good faith and follow the guidelines below, BabySafeGate will not pursue legal action solely for your responsible security research.

We ask that you:

Allow Reasonable Time

Give us sufficient time to investigate and resolve the issue before publicly disclosing it.

Respect User Privacy

Do not access, copy, modify, or disclose personal information belonging to other users.

Act in Good Faith

Avoid actions that could interrupt services, damage systems, compromise data, or negatively affect other users.

Do Not Exploit the Vulnerability

Do not use the vulnerability to obtain unauthorized access, extract sensitive information, or increase the impact of the issue.

Follow Applicable Laws

Conduct all research in accordance with applicable laws and regulations.

SECTION 2 – SECURITY RECOGNITION

BabySafeGate appreciates responsible vulnerability disclosures submitted by ethical security researchers.

At our sole discretion, we may choose to recognize or reward reports that identify significant security vulnerabilities. Any acknowledgment or reward is entirely voluntary and is determined based on factors such as severity, impact, report quality, and uniqueness.

Submitting a report does not guarantee compensation.

To be considered, you should:

Follow the Core Principles described above.
Report a legitimate security vulnerability.
Submit sufficient information to reproduce the issue.
Report the issue responsibly without causing harm.

SECTION 3 – NON-ELIGIBLE REPORTS

The following issues generally do not qualify for recognition or rewards:

Spam, phishing, or social engineering unrelated to our systems.
Missing SPF, DKIM, or DMARC records.
Clickjacking on non-sensitive pages.
Rate-limiting or brute-force observations without demonstrable impact.
Denial-of-Service (DoS) or Distributed Denial-of-Service (DDoS) attacks.
Issues requiring rooted, jailbroken, or otherwise modified devices.
Vulnerabilities affecting outdated or unsupported browsers, operating systems, or browser extensions.

HOW TO SUBMIT A REPORT

Please send your report to:

Email: contact@babysafegate.com

To help us investigate efficiently, include:

A detailed description of the vulnerability
Step-by-step instructions to reproduce the issue
The potential security impact
Screenshots, proof-of-concept code, or other supporting materials (if available)