Infosec Trust & Research

Responsible Disclosure

Bridgeway Technology Limited prioritizes system integrity and client data privacy. We encourage responsible security research and vulnerability reporting from the global cybersecurity community.

1. Safe Harbor Commitment

Bridgeway pledges not to initiate legal proceedings against cybersecurity researchers who discover and disclose vulnerabilities in good faith, avoid service disruptions (Denial of Service), refrain from accessing or modifying client records, and allow our team a standard 90-day remediation window before public disclosure.

2. Out of Scope Activities

  • Physical security attacks on datacenter facilities or staff offices.
  • Social engineering, phishing, or spear-phishing against Bridgeway employees or clients.
  • Denial of Service (DoS/DDoS) stress testing that impairs network availability.
  • Destruction, exfiltration, or modification of production data.

3. How to Submit a Vulnerability Report

Send an encrypted vulnerability advisory with reproduction steps, affected endpoints, and Proof-of-Concept (PoC) code to:

security@bridgewaytec.com
Email Security Team →