Vulnerability Disclosure Policy

Last updated: October 23, 2026

Antibody Cyber Technology, LLC welcomes reports from security researchers. If you believe you have found a security vulnerability in LinCold™, please report it as described below. We'll work with you to understand and resolve the issue quickly.

How to report

Email info@antibodynet.net and include:

• A description of the vulnerability and its potential impact
• The affected URL, endpoint or component
• Step-by-step instructions to reproduce it (a proof of concept, screenshots or request/response samples)
• Your name or handle, if you'd like to be credited

A machine-readable contact is also published at /.well-known/security.txt.

Scope

• In scope: the LinCold™ web application at https://vulnerweb.com
• Out of scope: denial-of-service, volumetric or load testing; social engineering or phishing; physical attacks; third-party services (for example, Stripe or AWS); reports from automated scanners that you haven't verified; missing best-practice headers that have no demonstrated impact

Guidelines

When you test, please:

• Use only accounts you created yourself, and don't access, modify or delete other users' data
• Stop and report right away if you encounter personal or sensitive data
• Don't degrade the Service or use the scanner to attack third-party systems
• Give us reasonable time to fix the issue before you disclose it publicly. We ask for 90 days.

Our commitment

• We'll acknowledge your report within 3 business days.
• We'll send an initial assessment within 10 business days and keep you updated on our progress.
• We'll credit you publicly, with your permission, once the issue is fixed.

Safe harbor

We consider research conducted in good faith and in accordance with this policy to be authorized. We won't pursue legal action against you or report you to law enforcement for it. If a third party takes legal action against you for activities that complied with this policy, we'll make it known that your actions were authorized.