Responsible Disclosure Policy – HackerHub8 LLP
Last Updated: March 15, 2026
At HackerHub8 LLP, security is a core priority of our cybersecurity ecosystem. We appreciate the efforts of security researchers, ethical hackers, students, and professionals who help identify potential vulnerabilities in our systems and services.
This Responsible Disclosure Policy explains how security researchers can responsibly report vulnerabilities to HackerHub8 LLP so that issues can be addressed quickly and safely without exposing users, systems, or data to unnecessary risk.
Purpose of Responsible Disclosure
The purpose of responsible disclosure is to ensure that security vulnerabilities are reported privately to the affected organization before they are publicly disclosed. This allows our security team to investigate, verify, and resolve the issue before malicious actors can exploit it.
HackerHub8 LLP encourages ethical security research conducted in good faith and supports responsible reporting practices that contribute to a safer digital ecosystem.
How This Relates to Our Vulnerability Disclosure Policy
This Responsible Disclosure Policy explains the coordinated-disclosure approach and timeline we follow once a vulnerability is reported. For the full list of in-scope/out-of-scope systems, qualifying vulnerability types, reporting requirements, and legal safe harbor, see our Vulnerability Disclosure Policy — that document is authoritative on scope and rules of engagement.
Our Coordinated Disclosure Timeline
We ask researchers to give us time to investigate and fix a reported issue before sharing any details publicly. Our standard timeline is:
- Day 0: You report the vulnerability; we acknowledge within 3 business days.
- Up to 90 days: We investigate and work on remediation. For complex issues, we'll communicate progress and may request additional time.
- After remediation: We'll confirm the fix with you where possible.
- Public disclosure: With our agreement, you're welcome to publish details after remediation, or after 90 days if a fix is still pending, whichever is later — unless earlier public disclosure would put users at risk, in which case we'll ask for more time.
Crediting Researchers
If you'd like public credit for a responsibly disclosed vulnerability, let us know in your report. We're happy to acknowledge researchers on request once a fix is confirmed, subject to Section "Recognition" of our Vulnerability Disclosure Policy.
How to Report
Email your report to our security team below. See our Vulnerability Disclosure Policy for the full list of information to include in your report.
Email: support@hackerhub8.in
Legal Protection
HackerHub8 LLP will not pursue legal action against security researchers who follow this Responsible Disclosure Policy and our Vulnerability Disclosure Policy, and act in good faith while reporting vulnerabilities.
However, activities that involve unauthorized access, exploitation, or malicious use of vulnerabilities may be considered illegal and could result in legal action.
Policy Updates
HackerHub8 LLP may update this Responsible Disclosure Policy periodically to reflect new technologies, security practices, or legal requirements.
If you have questions regarding vulnerability disclosure or cybersecurity reporting, please contact:
HackerHub8 LLP
Email: support@hackerhub8.in
