How security researchers can responsibly report vulnerabilities in CyberPhone products and services.
Effective: July 6, 2026
We welcome responsible disclosure of security vulnerabilities from independent researchers and customers.
This policy covers our public website, customer portal, and the software interfaces of CyberPhone products. It does not authorize testing against third-party devices or networks you do not own.
Include a clear description, reproduction steps, and impact. We acknowledge receipt within 48 hours.
We will not pursue legal action against good-faith researchers who avoid privacy violations, service degradation, and data destruction, and who give us reasonable time to remediate before public disclosure.
We aim to triage within 5 business days, provide an initial assessment within 15 business days, and coordinate disclosure of a fix according to severity.
This platform is provided exclusively to government intelligence agencies, police departments and law enforcement organizations for the authorized monitoring, protection and coordination of their undercover operatives. Every operation requires lawful authority within the acquiring jurisdiction, and the acquiring agency remains responsible for the authorization covering each enrolled device. We do not provide the platform for unauthorized surveillance, stalking, or use outside a lawful investigation. Each request is reviewed before any acquisition, and all deliveries are conditional upon acceptance of our legal notice.