At Aducot, we take the security of our website, customers, and systems seriously.

If you believe you have discovered a security vulnerability affecting our website, products, or services, we encourage you to report it responsibly so our team can investigate and address the issue.

Responsible Disclosure Guidelines

When reporting a potential security issue, we ask that you:

  • Act in good faith and avoid violating the privacy of our customers.
  • Do not access, modify, or delete data that does not belong to you.
  • Do not attempt to disrupt our website, services, or infrastructure.
  • Avoid exploiting vulnerabilities beyond what is necessary to demonstrate their existence.
  • Provide sufficient information to allow us to reproduce and verify the issue.
  • Allow us reasonable time to investigate and resolve the vulnerability before publicly disclosing it.

What to Include in Your Report

To help us evaluate your report efficiently, please include:

  • A clear description of the issue
  • Steps to reproduce the vulnerability
  • The affected page, feature, or URL
  • Screenshots or supporting evidence (if applicable)
  • Any potential impact you have identified

Reports with detailed information help us resolve issues more quickly.

Scope

This policy applies to security vulnerabilities that may affect:

  • The Aducot website
  • Customer accounts
  • Checkout and payment processes
  • Authentication systems
  • Website infrastructure and services

Exclusions

The following generally do not qualify as security vulnerabilities:

  • Spam reports
  • Social engineering attempts
  • Denial-of-service testing
  • Physical security issues
  • Issues requiring unrealistic user interaction
  • Missing security headers without demonstrated impact
  • Vulnerabilities affecting third-party services outside our control

Reward Program

Aducot currently does not operate a public bug bounty program.

While we appreciate responsible disclosures from security researchers, submission of a report does not create any entitlement to compensation or rewards.

Any recognition or reward will be granted solely at our discretion.

Contact Information

If you wish to report a security concern, please contact us:

Aducot Security Team

Email: security@aducot.com

Support Email: contact@aducot.com

Phone: +1 720 91 03 049

Address: 2400 Co Rd 113, Bennett, CO 80102