Security Disclosure

2. Reporting a Vulnerability

If you believe you have discovered a security vulnerability affecting a Gulfline Systems website or system, please report it to us as soon as reasonably possible.

Please use the security contact listed below rather than publicly disclosing the vulnerability before Gulfline Systems has had an opportunity to review and address the issue.

3. What to Include

To help us investigate a report, please provide as much relevant information as reasonably possible. This may include:

• The affected website, page, system, or URL.
• A description of the suspected vulnerability.
• Steps or conditions needed to reproduce the issue.
• Any relevant screenshots, logs, or other supporting information.
• The potential security impact, if known.

4. Responsible Testing

Security testing should be conducted responsibly and in a manner that does not unnecessarily affect Gulfline Systems, its customers, users, or third parties.

Please do not intentionally access, modify, delete, or disclose information belonging to other users. Do not perform actions that could disrupt services, degrade availability, or cause damage to systems or data. If testing reveals access to information that does not belong to you, stop testing and report the issue without further accessing or copying that information.

5. Our Response

Gulfline Systems will review submitted reports and may contact the reporter for additional information when necessary.

We will evaluate reported issues based on their circumstances and may take appropriate steps to investigate, mitigate, or remediate confirmed vulnerabilities. We cannot guarantee a particular response time, remediation timeline, or outcome for every report.

6. Coordinated Disclosure

We ask security researchers to provide Gulfline Systems with a reasonable opportunity to investigate and address reported vulnerabilities before publicly disclosing technical details. If public disclosure is being considered, we encourage coordination with Gulfline Systems in advance whenever reasonably possible.

7. Scope

This disclosure process applies to websites and systems operated or controlled by Gulfline Systems that are publicly accessible and reasonably identifiable as Gulfline Systems services.

Third-party services, customer systems, government systems, and other systems not operated or controlled by Gulfline Systems are outside the scope of this disclosure process. Security concerns involving those systems should be reported to the organization responsible for the affected system.