{"id":"CYB-11071","slug":"how-to-report-a-security-issue-to-edilec","title":"How to report a security issue to Edilec, and what happens next","excerpt":"How to report a security vulnerability in an Edilec website, product or service: where to send it, what to include, what is in scope, and what happens after you report.","kind":"Guide","searchIntent":"informational","category":"cybersecurity","tags":["vulnerability disclosure","security.txt","responsible disclosure","security reporting","Edilec"],"seoKeywords":["report a security issue to Edilec","Edilec vulnerability disclosure","Edilec security contact","security.txt","responsible disclosure policy"],"authorId":"edilec-engineering","publishedAt":"2026-10-13","updatedAt":"2026-10-13","readingTime":"4 min","image":"/social-images/blog/edilec-photo-cyb-11071-de3ecd087cae.jpg","status":"published","sourceCredits":[{"title":"RFC 9116: A File Format to Aid in Security Vulnerability Disclosure","url":"https://www.rfc-editor.org/rfc/rfc9116","author":"IETF"},{"title":"ISO/IEC 29147: Vulnerability disclosure","url":"https://www.iso.org/standard/72311.html","author":"International Organization for Standardization"},{"title":"Vulnerability Disclosure Policy Template","url":"https://www.cisa.gov/vulnerability-disclosure-policy-template","author":"Cybersecurity and Infrastructure Security Agency"}],"body":[{"type":"paragraph","text":"If you think you have found a security issue in an Edilec website, product or service, email security@edilec.com. Include the affected URL or component, the steps to reproduce it and the impact you believe it has. We acknowledge reports within one business day and keep you updated until the issue is fixed. Our full policy is on the [Security](/security/) page."},{"type":"image","src":"/social-images/blog/edilec-photo-cyb-11071-de3ecd087cae.jpg","alt":"A laptop and an open notebook with a pen on a wooden table in the evening, beside a coffee mug and a table lamp.","caption":"Reporting an issue privately to security@edilec.com lets it be fixed before anyone else finds it.","width":1200,"height":750},{"type":"heading","id":"where-to-report","depth":2,"text":"Where to report"},{"type":"paragraph","text":"Send reports to security@edilec.com. The same address is published in our security.txt file at https://edilec.com/.well-known/security.txt, the standard location defined by RFC 9116 that security researchers and tools check first. Please use this address rather than general contact forms or social media, so the report reaches the people who can act on it."},{"type":"heading","id":"what-to-include","depth":2,"text":"What to include"},{"type":"list","items":["The affected URL, product or component.","Clear steps to reproduce the issue, including any requests, parameters or settings involved.","What you believe the impact is: what an attacker could see, change or do.","Screenshots or a short recording if they help, with any personal data removed.","How you would like to be credited, or that you prefer not to be."]},{"type":"heading","id":"scope","depth":2,"text":"What is in scope"},{"type":"table","columns":["In scope","Out of scope"],"rows":[["edilec.com","Denial of service"],["uynis.com","Social engineering of Edilec staff"],["The Edilec client portal","Physical attacks on offices or equipment"]]},{"type":"heading","id":"ground-rules","depth":2,"text":"Ground rules for good-faith research"},{"type":"list","items":["Do not access, change or delete data that is not yours. If you reach someone else's data, stop and tell us.","Do not disrupt our services or degrade them for other users.","Do not share the issue publicly before it is fixed.","Give us a reasonable time to fix the issue before discussing it."]},{"type":"callout","tone":"tip","title":"Legal safe harbour","text":"We will not take legal action against good-faith research that follows this policy."},{"type":"heading","id":"what-happens-next","depth":2,"text":"What happens after you report"},{"type":"table","columns":["Step","What we do"],"rows":[["Acknowledge","Reply within one business day to confirm we received the report"],["Assess","Reproduce the issue, assess its severity and decide on the fix"],["Fix","Fix the cause and check the fix"],["Update","Keep you informed until the issue is resolved"],["Close","Confirm the fix and, if you wish, credit you"]]},{"type":"heading","id":"why-a-policy","depth":2,"text":"Why a disclosure policy matters"},{"type":"paragraph","text":"A published disclosure policy tells researchers that reports are welcome, gives them a safe way to send them and sets fair expectations on both sides. International standards such as ISO/IEC 29147 and public templates such as the one from the US Cybersecurity and Infrastructure Security Agency describe the same building blocks we follow: a clear contact, a defined scope, ground rules and a commitment to respond."},{"type":"paragraph","text":"If your own organization needs a disclosure policy or a security.txt file, or wants its systems tested, see [Penetration Testing and Red Team Services](/services/penetration-testing/)."},{"type":"image","src":"/attachments/article-media/editorial/edilec-security-issue-reporting.svg","alt":"Six-step Edilec diagram for reporting a security issue: email security@edilec.com, include the details, acknowledgement within one business day, assessment, fix and updates, then closing and credit.","caption":"Reports to security@edilec.com are acknowledged within one business day and followed until the fix is confirmed."}],"relatedArticleIds":["CYB-11069","CYB-11067","GEN-SEC-0008","KM-SEC-0218"],"faqs":["FAQ-SEC-PT-010"],"researchSources":[{"title":"RFC 9116: A File Format to Aid in Security Vulnerability Disclosure","url":"https://www.rfc-editor.org/rfc/rfc9116","author":"IETF"},{"title":"ISO/IEC 29147: Vulnerability disclosure","url":"https://www.iso.org/standard/72311.html","author":"International Organization for Standardization"},{"title":"Vulnerability Disclosure Policy Template","url":"https://www.cisa.gov/vulnerability-disclosure-policy-template","author":"Cybersecurity and Infrastructure Security Agency"}],"mediaAssets":[],"relatedIds":["CYB-11069","CYB-11067","GEN-SEC-0008","KM-SEC-0218"]}