ABOUT CLIENT PORTAL ADVISOR PORTAL

Security Policy

Security Policy


Digital Advisory takes the security of its systems, data, and users seriously.


We welcome responsible disclosure of security vulnerabilities and will work with security researchers to investigate and remediate valid issues in a timely manner.


Scope


This policy applies to:


  • digitaladvisory.com and its subdomains
  • Public-facing web applications and services operated by Digital Advisory

Third-party services used by Digital Advisory (for example community platforms or embedded tools) are governed by their own security policies and should be reported to the relevant provider directly where appropriate.


Reporting a Vulnerability


If you believe you have discovered a security vulnerability, please report it responsibly by emailing:


[email protected]


Please include, where possible:


  • A clear description of the issue
  • The affected URL or component
  • Steps to reproduce the vulnerability
  • Any relevant proof-of-concept or screenshots

We ask that you do not publicly disclose the issue until we have had an opportunity to investigate and address it.


What We Ask of Researchers


When conducting security research, please:


  • Avoid actions that could degrade service availability (e.g. denial-of-service attacks)
  • Avoid accessing, modifying, or exfiltrating data belonging to other users
  • Avoid social engineering, phishing, or physical security testing
  • Limit testing to accounts and data you own or have explicit permission to use

Our Commitment


Upon receiving a valid report, Digital Advisory will:


  • Acknowledge receipt of the report in a reasonable timeframe
  • Investigate the reported issue
  • Take appropriate remediation actions where necessary

We appreciate the efforts of the security community in helping us maintain a safe and secure platform.


Legal Safe Harbor


Digital Advisory will not pursue legal action against researchers who:


  • Act in good faith
  • Follow this policy
  • Make a genuine effort to avoid privacy violations, service disruption, or data destruction