Find how to responsibly report potential security vulnerabilities to ICT Integrators and help us maintain a secure digital environment.
SUPPORT
At ICT, security is a fundamental part of how we design, deploy, and support technology solutions. We recognize that security researchers, customers, partners, and members of the technology community may occasionally identify potential vulnerabilities affecting our publicly accessible digital assets. We encourage the responsible reporting of security vulnerabilities so that they can be investigated and addressed in a timely manner. If you believe you have discovered a security issue related to an ICT website, application, portal, or other publicly accessible service, please notify us as soon as possible by providing sufficient details to help us understand and reproduce the issue. When submitting a report, we encourage you to include: A clear description of the vulnerability The affected URL, system, application, or service Steps required to reproduce the issue Screenshots, logs, or supporting evidence where applicable Contact information in case additional clarification is required To help ensure the safety of our users and systems, we request that researchers: Avoid actions that may disrupt services or impact users Do not access, modify, download, or disclose data that does not belong to you Do not attempt social engineering, phishing, physical intrusion, denial-of-service testing, or other activities that could negatively affect operations Provide ICT with a reasonable opportunity to investigate and remediate reported issues before public disclosure ICT reviews all legitimate vulnerability reports and will make reasonable efforts to acknowledge receipt and assess the information provided. While we appreciate responsible security research, the submission of a vulnerability report does not create any entitlement to compensation, reward, employment, partnership, or contractual relationship unless explicitly agreed in writing. This responsible disclosure process applies only to vulnerabilities identified within ICT-owned and publicly accessible digital assets. Third-party products, services, platforms, and websites are subject to the policies and procedures of their respective owners. If you wish to report a potential security vulnerability, please contact us through the designated security contact published on our website. We appreciate the efforts of individuals who help improve the security and resilience of digital environments through responsible disclosure.