1. How to report
Email [email protected] with what you found, where, the steps to reproduce it and its likely impact. Screenshots or a short proof of concept help. Our contact is also at abbyvideo.com/.well-known/security.txt.
2. In scope
- the abby. for Mac and Abby Monitor for iPhone, iPad and Mac (current versions);
- abbyvideo.com, account sign-in and abbyvideo.com/account;
- our license system, download service and cloud relay (relay.abbyvideo.com).
3. Please don't
- test against a production's set, devices or footage, or against other people's accounts, licenses or relay rooms; use test accounts and rooms you created;
- access, change, keep or share anyone else's data beyond the minimum needed to show the problem, and stop as soon as you've shown it;
- use denial-of-service, flooding, spam or social engineering, or test physical security;
- run heavy automated scans that degrade our services;
- test our providers' own systems (Cloudflare, Stripe, Apple); report those to them.
4. What we promise
- We'll acknowledge your report within five business days and keep you updated.
- We'll fix valid problems as fast as we can, starting with the most serious, and tell you when they're fixed.
- Please give us reasonable time to fix a problem before you disclose it; we'll agree a date with you, normally within 90 days.
5. Safe harbor
If you act in good faith and follow this policy, we won't pursue legal action against you for your research, and we consider it authorized under anti-hacking laws and our terms. If someone else complains about research you did under this policy, we'll say it was authorized. This doesn't cover breaking the law or going beyond what's needed to show a problem.
6. Thanks
We don't pay bounties. With your permission, we'll thank you by name (or a handle) on this page once a problem is fixed.
Researchers we've thanked: none yet. Yours could be the first name here.
7. Contact
Security reports: [email protected].
Abby Video LLC, a New Jersey limited liability company. Email [email protected]. Mailing address: Abby Video LLC, 316 E Collings Dr, Williamstown, NJ 08094, USA.