Responsible Disclosure
A safe channel for reporting security issues affecting Ravenward-controlled assets.
Before testing
Only test systems where you have explicit authorization. Do not attempt to access accounts, data or systems beyond the permitted scope.
What to report
Include the affected asset, concise description, reproduction steps, impact and supporting evidence. Remove secrets and unnecessary personal data.
Safe handling
Do not publish a vulnerability publicly before Ravenward has had an opportunity to investigate and coordinate remediation.
Reporting channel
Email security@ravenward.com. Replace with Ravenward's official security-reporting mailbox and PGP key before launch — see /public/security.txt.
Do not use the public contact form for sensitive vulnerability evidence.