Confidentiality & Responsible Disclosure

SecureRounds takes confidentiality and responsible communication seriously. General website and email channels are not intended for patient information, credentials, detailed vulnerabilities, active incident evidence, or other highly sensitive material.

Responsible security disclosure

To report a potential security issue involving the SecureRounds website, contact hello@securerounds.com with a concise, non-destructive description. Do not access data that is not yours, disrupt service, use social engineering, or publish details before SecureRounds has had a reasonable opportunity to review the report.

Client confidentiality

Confidentiality obligations for client engagements are defined by the applicable written agreement. SecureRounds supports governance and evidence handling practices appropriate to the agreed scope.

Security file

The current machine-readable security contact is available at /.well-known/security.txt.