Responsible Disclosure Policy

Scope

Third-party services are excluded unless explicitly stated.

• ZeusTier-owned domains and infrastructure
• Public-facing applications and services operated by ZeusTier

How to Report a Vulnerability

Please submit reports to: security@zeustier.com Include: - Detailed description of the issue - Proof of concept (non-destructive) - Affected assets - Date and time of discovery

Researcher Guidelines

• Act in good faith
• Avoid accessing, modifying, or deleting data
• Avoid service disruption
• Allow reasonable time for remediation

Legal Safe Harbor

ZeusTier commits not to initiate legal action against researchers who adhere to these principles.

• Follow this policy
• Do not exploit vulnerabilities maliciously
• Respect user privacy and data

Disclosure Process

• Acknowledge reports
• Assess and prioritize remediation
• Communicate as appropriate

No Bug Bounty Program

ZeusTier does not currently offer a public bug bounty unless stated otherwise.