Security

Reporting a vulnerability

If you believe you have found a security issue in a CreArts Technology LLC website or product, tell us through the contact form and mark the message as a security report. Include what you found, where, and the steps to reproduce it.

We will acknowledge your report and keep you updated while we investigate. Please give us a reasonable window to fix an issue before disclosing it publicly.

What we ask of researchers

• Do not access, modify, or delete data that is not yours.
• Do not run tests that degrade service for other users.
• Do not use social engineering or physical attacks against our people or offices.
• Contact us before any testing that goes beyond ordinary use of the site.

How we build

Security is part of delivery rather than a stage at the end: architecture is reviewed before code is written, threat models are kept alongside roadmaps, and access to systems is scoped to what a role actually needs.

Scope

This page covers crearts-tech.com and the products we operate. If you are a client with an engagement in progress, your agreement sets out the specific security commitments for that work.