Security Disclosure Policy
This Security Disclosure Policy explains how Quantum Intelligence Hub LTD and the broader QIH ecosystem may receive, review, coordinate, and manage responsible security vulnerability disclosures related to interconnected digital infrastructure, operational systems, educational platforms, webshop environments, and online services.
Security Disclosure Policy
This policy may apply to Quantum Intelligence Hub LTD, QIHHUB.COM, QIHHUB.INFO, QIHNETWORK.COM, QIHHUB.ONLINE, QIHHUB.NET, QIHHUB.SHOP, QIHHUB.STORE, OMERAKIN.NL, and related QIH ecosystem platforms.
The QIH ecosystem may operate interconnected infrastructure environments including cybersecurity systems, hosting services, webshop platforms, automation systems, educational infrastructures, operational monitoring environments, and digital management systems.
QIH may encourage responsible and ethical disclosure of legitimate security vulnerabilities intended to improve operational security, infrastructure resilience, and digital continuity.
1. Responsible Disclosure Principles
Security researchers, ethical hackers, infrastructure analysts, and independent researchers may report legitimate vulnerabilities discovered within applicable QIH-operated digital environments.
QIH may review reports in accordance with operational security priorities, infrastructure impact, legal obligations, and internal verification procedures.
2. Scope of Applicable Systems
This policy may apply to:
- official QIH websites;
- hosting environments;
- webshop infrastructures;
- automation systems;
- educational platforms;
- authentication systems;
- API integrations;
- operational dashboards;
- digital infrastructure services.
Third-party systems may remain subject to independent provider policies.
3. Authorized Security Research Activities
Permitted responsible disclosure activities may include:
- non-destructive vulnerability identification;
- security misconfiguration reporting;
- authentication weakness reporting;
- exposed sensitive endpoint reporting;
- responsible proof-of-concept testing;
- security observation reporting.
Testing activities should avoid operational disruption, unauthorized access, excessive traffic generation, data destruction, or service instability.
4. Prohibited Activities
The following activities are prohibited:
- data theft;
- service disruption attacks;
- ransomware activities;
- social engineering attacks;
- destructive testing;
- unauthorized persistence;
- privilege escalation attempts;
- mass scanning causing operational instability;
- customer data extraction;
- blackmail or extortion.
5. Disclosure Requirements
Security reports should include:
- affected system details;
- technical description;
- reproduction steps where applicable;
- impact assessment;
- supporting screenshots or logs if available;
- researcher contact information.
Incomplete or unverifiable reports may require additional validation before review.
6. Coordinated Disclosure
QIH may request reasonable timeframes for:
- internal investigation;
- security validation;
- infrastructure remediation;
- operational risk assessment;
- patch deployment;
- security coordination.
Public disclosure before remediation completion may increase operational security risks.
7. No Guaranteed Compensation
Unless separately announced in writing, QIH does not guarantee:
- financial rewards;
- bug bounty payments;
- commercial compensation;
- public recognition;
- partnership opportunities;
- employment offers.
Any recognition or discretionary reward decisions may remain entirely voluntary.
8. Infrastructure and Legal Limitations
Security researchers remain independently responsible for complying with:
- local laws;
- cybersecurity regulations;
- international digital laws;
- privacy regulations;
- data protection requirements;
- authorized testing boundaries.
Nothing within this policy authorizes illegal access or unlawful activities.
9. Third-Party Platforms
QIH infrastructure may rely on independent providers including:
- hosting providers;
- cloud services;
- payment systems;
- automation platforms;
- educational systems;
- analytics providers.
Third-party services may maintain separate security disclosure procedures outside QIH operational control.
10. Limitation of Liability
QIH may adopt a limited liability approach regarding:
- third-party infrastructure behavior;
- external platform vulnerabilities;
- independent provider failures;
- international routing systems;
- internet-wide service interruptions;
- external dependency failures.
11. Related Policies
12. Contact
For responsible vulnerability disclosure and operational security communication:
QUANTUM INTELLIGENCE HUB LTD
71-75 Shelton Street,
Covent Garden,
London, WC2H 9JQ
United Kingdom
Security Team: security@qihhub.com
Legal: legal@qihhub.com
General: info@qihhub.com
Last Updated: May 2026