Security and Vulnerability Reporting

Protecting your installation

Download FilePulse only from filepulsesoft.com or the official FilePulseSoft GitHub organization. Keep the product current, protect local administrator and FilePulse credentials, and avoid exposing its local management interface directly to the public internet.

What to report

Please report vulnerabilities that could affect FilePulseSoft software, downloads, license services, or this website. Include the affected version or URL, reproduction steps, impact, and any safe proof of concept. Do not include real license keys, passwords, personal data, or data belonging to other users.

By submitting a report, you confirm that you are authorized to provide its contents and permit us to use, reproduce, and share the report as reasonably needed to investigate, remediate, and coordinate with relevant service providers or maintainers.

Responsible testing

Test only systems and accounts you own or have explicit permission to test. Do not perform denial-of-service, social engineering, credential attacks, malware deployment, persistence, destructive actions, or data extraction. If you encounter sensitive data or unintended access, stop testing, avoid retaining the data, and report the issue promptly.

Review and disclosure

We may review credible reports, request clarification, and coordinate remediation or disclosure when appropriate, but cannot promise an individual response or resolution timeline. Please allow a reasonable investigation period before publishing details.

Submitting a report does not create a contract, confidentiality obligation, employment relationship, bounty entitlement, safe-harbor commitment, or authorization beyond these guidelines. You remain responsible for complying with applicable law.