Responsible Disclosure

Last updated: July 20, 2026

We take security seriously

At Devote, we pay close attention to the security of our systems, websites, and services. Despite all due care, a vulnerability may still be present.

Have you discovered a potential security vulnerability? If so, we would appreciate it if you would report it to us in a responsible manner. This allows us to investigate and resolve the issue as quickly as possible.

We ask you to

If you discover a vulnerability, we kindly request that you:

• Report the vulnerability to us as soon as possible.
• Do not make the vulnerability public before it has been resolved.
• Do not view, copy, or modify more data than is necessary to demonstrate the vulnerability.
• Do not place malware or use social engineering, brute force, or denial of service attacks.
• Do not exploit the vulnerability after it has been demonstrated.
• Provide sufficient information so that we can reproduce and resolve the issue.

What can you expect from us?

If you adhere to the above guidelines:

• We will confirm receipt of your report.
• We will investigate the reported vulnerability as quickly as possible.
• We will keep you informed of the progress where possible.
• We will treat your report confidentially.
• We will not take legal action regarding your research, provided you have acted in good faith and within the framework of this Responsible Disclosure policy.

Report a vulnerability

Send your report to: security@devote.com

Please include the following, preferably:

• A description of the vulnerability.
• The URL, system, or application to which the vulnerability relates.
• The steps to reproduce the issue.
• Any screenshots or log files that assist in investigating the report.

The more complete the report, the faster we can assess it.

Thank you

We appreciate it when security researchers help us make our services more secure. By reporting vulnerabilities in a responsible manner, you contribute to a safer internet for everyone.