Reporting a security issue
This page covers every app made by Kingston Falls.
How to report
Email security@kingstonfalls.com. Please include:
- Which app, and where in it you found the problem.
- The steps to reproduce it.
- What you think the potential impact could be.
Do not include real customer data. Use a test site, or describe the data instead.
Please give us the chance to fix a problem before you make it public. Do not test against a site that is not yours.
What happens next
- We acknowledge your report within two business days.
- We tell you whether we could reproduce it, and how serious we judge it, within five business days.
- We tell you when the fix is released.
We do not run a paid bug bounty.
How quickly we fix
For our Atlassian Marketplace apps, these are the times Atlassian requires of every cloud app, counted from when a problem is confirmed.
| Severity | Fixed within |
|---|---|
| Critical | 10 days |
| High | 4 weeks |
| Medium | 12 weeks |
| Low | 25 weeks |
A security incident that affects customers’ data is reported to the marketplace the app is sold through within 24 hours of our learning of it, and to the affected customers without undue delay.
How each app is built
Each app has a page describing what it can reach, where it stores data, and what its logs hold: