Responsible Disclosure

At sync.blue®, we take the security of our enterprise platform and customer data very seriously and welcome responsible security research.

If you believe you have identified a security vulnerability, please submit a report to service@sync.blue   including:

• A clear description of the issue
• A concrete, reproducible scenario
• Evidence of practical impact (e.g. data exposure, privilege escalation, service disruption)

Reports limited to theoretical risks, missing hardening headers, or best‑practice recommendations without demonstrable exploitability or measurable impact are considered out of scope.

Each report is reviewed by our technical team with a focus on real‑world exploitability and observable security impact.

Eligible vulnerabilities with verified impact may qualify for a reward. The bounty amount depends on severity, exploitability, and impact.