Security & Vulnerability Reporting

If you believe you have discovered a potential security vulnerability affecting AVENTIQ systems or client platforms, please report it promptly to our security team at:

Please provide reproducible steps, technical impact details, and any proof-of-concept scripts. We request that you encrypt sensitive vulnerability details using our official PGP key.

Ground Rules for Responsible Research

• Avoid Data Destruction: Do not access, modify, or exfiltrate client or user data. Limit testing to the minimum necessary to demonstrate proof-of-concept.
• No Denial of Service: Do not perform volume-based Denial of Service (DoS/DDoS) attacks, brute force attacks against authentication gates, or spamming of contact channels.
• Coordinated Disclosure: Provide us a reasonable window (typically 90 days) to triage and patch vulnerabilities prior to public disclosure.

Safe Harbor Policy

AVENTIQ will not pursue legal action against researchers who conduct security testing in good faith, adhere strictly to these guidelines, and report findings responsibly without compromising client data privacy or operational integrity.