Responsible Disclosure Policy

Effective Date: August 1, 2025

At Altis, the security of our systems and customer data is a top priority. We know that no system is perfect, and we welcome reports from security researchers and members of the public who help us spot potential vulnerabilities.

Scope

Focus your testing and reporting efforts strictly on systems and vulnerabilities that fall within our defined scope.

In Scope

Out of Scope

  • Physical security testing of Altis offices or infrastructure.
  • Social engineering attempts (e.g., phishing).
  • Any form of Denial-of-Service (DoS) testing.
  • Automated scanning without prior coordination.

How to Report a Vulnerability

Email us at security-disclosure@altis.com

  • Clear description of the issue
  • Steps to reproduce
  • Proof-of-concept if available
  • Your contact information

Do not include sensitive customer data or credentials.