Qoria believes in providing the ability for good-faith security researchers to report security vulnerabilities that they find.
We believe that a relationship of trust and respect can allow researchers to assist us in protecting the data of our customers as well as the confidentiality, integrity and availability of our products, services and systems.
We believe that no system is perfect and want to help researchers report findings to protect those that trust us with their data and protection. Your participation in our Vulnerability Disclosure Policy program is voluntary. By submitting a report or otherwise disclosing a vulnerability to us, you are indicating that you have read and agree to follow the rules set forth on this page.
Qoria accepts good faith reports of security vulnerability findings from any source including, but not limited to, cyber security researchers and our customers.
Any vulnerabilities reported to Qoria will be assessed for severity using the CVSS (Common Vulnerability Severity Scoring) framework. This severity assessment combined with contextual assessments forms the priority of a vulnerability.
All legitimate vulnerabilities reported via this form will be triaged, mitigated, remediated or accepted according to internally defined and agreed processes that govern the effective handling of vulnerabilities discovered within our environments.
Qoria will respond to any legitimate reports which are received via this form and will work with researchers to help maintain the privacy and safety of our customers.
You are expected, as always, to comply with all applicable laws.
Please do not discuss any vulnerabilities (even resolved ones) outside of the program without consent from the Qoria Security team unless they are made public.
We appreciate your help and promise to treat you as a friend and ally as long as you act in good faith.
If you have any concerns or questions about this safe harbour policy, please contact our security team directly (You can find our contact details in our RFC9116 compliant security.txt file).
Product |
Link |
Qustodio |
*.qustodio.com *.qustodio.net |
School Manager and Classwize |
*.familyzone.io |
Smoothwall Firewall |
N/A |
Record Manager |
app.safeguard.software |
CipaFilter |
*.cipafilter.com |
Net-Ref |
Testdistrict05.net-ref.com login.net-ref.com speedtest.net-ref.com |
Educator Impact |
*.educatorimpact.com |
Family Zone |
*.familyzone.com |
Qoria |
*.qoria.com *.qoriaapis.cloud *.qoria.cloud |