Security / Responsible Disclosure

Responsible disclosure.

Geostrategy takes the security of our infrastructure and data seriously. This page is our first-party intake for security researchers and the wider community to report potential vulnerabilities affecting our public website and publicly exposed services.

Submit a report

Use the form below to prepare a structured report. It opens a pre-addressed email draft so you can review the contents before sending. Do not include passwords, access tokens, private keys, identity documents, client data, or attachments.

1. What makes a useful report

If you prefer not to use the form, include:

• A clear description of the vulnerability and its potential impact.
• The specific URLs, parameters, or endpoints affected.
• Detailed steps to reproduce the issue, including any necessary payloads or proof-of-concept code.

2. Secure communication

If your report contains sensitive information, consult our PGP key area for the current encrypted-contact status. Alternatively, you can email us directly at hq@geostrategy.com.

3. Rules of engagement

When investigating potential vulnerabilities, we ask that you:

• Make every effort to avoid privacy violations, degradation of user experience, and disruption to production systems.
• Do not access, modify, delete, or exfiltrate data that does not belong to you.
• Do not perform denial-of-service (DoS) attacks, spamming, or social engineering against our staff or clients.

4. Recognition

We review all responsible disclosures promptly and will acknowledge receipt of your report. While we do not operate a formal, paid bug bounty program or guarantee monetary rewards, we deeply appreciate the efforts of researchers who help keep our systems secure and will coordinate with you on remediation.