Remote Pro Ai

Security and vulnerability disclosure

How Remote Pro Ai secures client work and how to report a vulnerability responsibly. Our machine-readable contact is at /.well-known/security.txt.

Report a vulnerability

Fig. 01Security & vulnerability disclosure

  • 3.4%5 gates passed
  • 9practices
  • 48hshortlist
  • 4working days to start

Security summary

The control summary and certification status (ISO/IEC 27001 in progress, SOC 2 Type II planned for 2027) are on the Trust & Security page.

Vulnerability disclosure

Report a suspected vulnerability through the contact page; we acknowledge receipt and keep you informed until it is resolved.

Disclosure terms

Disclosure terms, subject to counsel sign-off:

  • Scope

    remote-pro.ai and its app, talent, trust, status and mcp subdomains. Out of scope: third-party services, social engineering, physical attacks, denial of service.

  • Safe harbour

    Good-faith research within this scope is authorised; we will not pursue legal action and we ask that you do not access, modify or retain data beyond what proves the issue.

  • Response targets

    Acknowledgement within 2 working days, triage within 5, a fix or mitigation plan within 30 for high-severity findings.

  • Recognition

    Named thanks on this page with your consent; no monetary bounty at this stage.

security.txt

The disclosure contact is also published at /.well-known/security.txt (RFC 9116).

Report a vulnerability