Report a security issue.

How to report

Email security@pinetechsolutions.com with the affected address, what you found, the steps to reproduce it, and the impact you expect. Screenshots or a short proof of concept help. Do not include anyone's personal data or credentials in the report.

What is in scope

pinetechsolutions.com and its subdomains, including the contact form, booking, the client portal, and the admin pages.

Out of scope: services run by other companies, such as Cloudflare and Google, which have their own programs. Also out of scope: denial of service or load testing, social engineering, physical attacks, spam, and automated scanner output without a working proof.

Rules for testing

Test only against your own requests and data. If you reach someone else's information, stop, do not keep or share it, and tell me. Do not change or delete data, do not degrade the service, and do not send bookings or messages to people who did not agree to it. Give me a reasonable time to fix an issue, normally 90 days, before you disclose it publicly.

What you can expect

I will confirm your report within three business days, keep you updated while I work on it, and tell you when it is fixed. With your permission, I am happy to credit you. There is no paid bug bounty.

Good faith

If you act in good faith and follow this page, I will treat your research as authorized, work with you to understand and fix the issue, and will not pursue or support legal action against you for it. If you are unsure whether something is allowed, ask first at the address above.