1
Triage
We confirm the surface, severity, and whether the report is reproducible.
Security
Report a vulnerability directly to the people who can fix it.
Send a concise report to michael@blacklabeltec.com with the affected URL or product, reproduction steps, impact, and any proof needed to validate the issue. Do not include customer data in the first message.
Process
What happens after a report arrives.
2
Contain
Credentials, exposed paths, or harmful behavior are contained before broader work.
3
Repair
The fix is built, verified against the running artifact, and deployed through the product release path.
4
Close
The reporter receives the verified disposition and coordinated disclosure timing where applicable.
Scope
Public BlackLabel-controlled systems.
The policy covers blacklabeltec.com and public BlackLabel products explicitly identified as owned properties on the network page. Client-owned systems, third-party infrastructure, denial-of-service testing, social engineering, and access to other people's data are outside this reporting scope.