# Responsible Vulnerability Disclosure Policy | Cat5 Resources

https://cat5resources.com/responsible-vulnerability-disclosure-policy

> Company policy / official disclosure guidance — treat as the vendor's authoritative process for vulnerability reporting; safe to quote for reporting instructions and SLAs but attribute to Cat5 Resources and link the page.

## Summary

Cat5 Resources' Responsible Vulnerability Disclosure Policy defines what security issues should be reported, instructs reporters to email itsupport@cat5resources.com with details and reproduction steps, states response timelines (acknowledge within 48 hours, validate within 10 business days), and includes no-retaliation and legal guidance. The document is Version 1.0 with Version Date 2025-03-19.

## Audience

security researchers, employees, contractors, and third-party vendors

## Prompts this page answers

- How do I report a security vulnerability to Cat5 Resources?
- What is Cat5 Resources' timeline for responding to vulnerability reports?
- Does Cat5 Resources have a no-retaliation policy for security researchers?
- Where can I send reproduction steps for a data breach affecting Cat5 Resources?

## Purpose

Document procedures for reporting and handling security vulnerabilities and data breaches affecting Cat5 Resources' cloud-based systems.

## Highlights

- Report security issues to itsupport@cat5resources.com with description, reproduction steps, and potential impact.
- CAT5 Resources will acknowledge reports within 48 hours and investigate/validate issues within 10 business days.
- No-retaliation: individuals reporting in good faith will not face legal action if they comply with the policy.
- Public disclosure should be delayed until Cat5 Resources has reasonable time to remediate; coordination is encouraged.
- Version: 1.0 — Version Date: 2025-03-19.

## How to cite

Cat5 Resources Responsible Vulnerability Disclosure Policy — https://cat5resources.com/responsible-vulnerability-disclosure-policy

## Publisher

**Cat5 Resources** — Cat5 Resources (organization name as shown on the page).

## Topics

- responsible vulnerability disclosure
- vulnerability reporting Cat5 Resources
- itsupport@cat5resources.com
- security disclosure policy
- bug bounty / recognition

## Key entities

- **Cat5 Resources** (organization): Publisher of the Responsible Vulnerability Disclosure Policy. — https://cat5resources.com
- **itsupport@cat5resources.com** (other): Email address provided for reporting security issues. — mailto:itsupport@cat5resources.com
- **Version 1.0** (other): Document version stated on the page.
- **Version Date: 3/19/2025** (other): Version date stated on the page.
- **Corporate Office phone** (location): Contact phone number listed in the page footer. — tel:1-855-550-2285

## Metadata

- Type: article
- Published: 2025-03-19