How to report
Email security-nrgdrill@alcings.com with a description of the issue, the steps to reproduce it, and its likely impact. Please don't include other customers' data.
We will acknowledge your report within [3 working days], keep you informed as we investigate, and tell you when it's fixed.
In scope
- The NRG-Drill web app and its API at
nrgdrill-app.alcings.com - The NRG-Drill Transmitter
- This website
Out of scope
- Denial-of-service or load testing
- Social engineering of our staff or customers, and physical attacks
- Accessing, changing or deleting data that isn't yours. Use your own trial organisation for testing; ask us if you need one.
- Findings from automated scanners without a demonstrated impact
- Rigsite systems we don't operate (rig databases, WITS equipment)
Safe harbour
If you act in good faith, stay within this policy, avoid harming people, data and the service, and give us reasonable time to fix the issue before telling anyone else, we will not pursue legal action against you for your research.
Thanks
With your permission, we'll credit you once the issue is fixed.
Machine-readable contact details: /.well-known/security.txt.