Security Policy

If you have found a security vulnerability in missioninfosec.com, report it privately using the process below. We investigate every report.

Scope

In scope:

• missioninfosec.com and the pages and files it serves.

Out of scope:

• link.missioninfosec.com and login.missioninfosec.com. These are hosted by GoHighLevel, not by this site. Report issues with them to GoHighLevel directly.
• Third-party services the site embeds or links to, such as GoHighLevel forms, Vercel Analytics, and YouTube, except where the issue is in how this site uses them.

Reporting a Vulnerability

Email info@missioninfosec.com with "Security" in the subject line. Include the affected URL, steps to reproduce, and what an attacker could do with the issue.

Do not disclose the issue publicly until it is fixed or we have agreed on a disclosure date.

What to Expect

• Acknowledgement within 3 business days.
• Assessment and a plan, or a reason the report is not a vulnerability, within 10 business days.
• Credit in the fix, if you want it.

Mission InfoSec does not run a bug bounty program and does not pay for reports.

The machine-readable contact is published at /.well-known/security.txt.