Security & Responsible Disclosure

Last updated: February 13, 2026

Cylio LLC ("Cylio") takes the security of our systems and client data seriously. This page describes our general security practices and provides guidance for reporting potential vulnerabilities.

Our Security Practices

We employ commercially reasonable measures to protect the confidentiality, integrity, and availability of our systems and the data we handle. These measures include but are not limited to:

  • Use of encrypted connections (HTTPS/TLS) for data in transit
  • Access controls and authentication for internal systems
  • Regular review and updating of security practices
  • Limiting data collection to what is necessary for our services

Reporting a Vulnerability

If you discover a potential security vulnerability on our website or in our systems, we encourage you to report it responsibly. Please contact us at:

Responsible Disclosure Guidelines

We ask that researchers:

  • Provide a clear description of the vulnerability, including steps to reproduce it
  • Allow us reasonable time to investigate and address the issue before any public disclosure
  • Avoid accessing, modifying, or deleting data belonging to other users
  • Do not perform denial-of-service attacks, social engineering, or other disruptive testing
  • Act in good faith and comply with all applicable laws

What to Expect

After receiving your report, we will:

  • Acknowledge receipt within three (3) business days
  • Investigate and assess the reported vulnerability
  • Work to remediate confirmed vulnerabilities in a timely manner
  • Keep you informed of our progress if you have provided contact information

Scope

This policy applies to the Cylio website and any systems directly operated by Cylio LLC. Third-party services, plugins, or platforms are outside the scope of this policy.

Related Policies

Please also review our Privacy Policy and Contact Us page.

Contact Us

If you have questions about this policy, please contact us: