01Our commitment
We test other people's systems for a living, so we hold our own to the same standard. Customer data, findings and credentials are treated as highly sensitive from the first scoping call to the final report.
02How our testing stays safe
- Authorized scope only. We test only targets you've authorized in writing, inside agreed windows.
- Confirm and hold. Agents and researchers prove impact, then stop. No destructive actions, no data exfiltration beyond what's needed to demonstrate impact.
- Audit trail. Every request is written to a tamper-evident, hash-chained log you can review.
03Protecting your data
- Findings, evidence and credentials are encrypted in transit and at rest.
- Access is restricted to the researchers assigned to your engagement.
- Test credentials and evidence are deleted at the end of an engagement unless you ask us to keep them.
04Reporting a vulnerability
If you believe you've found a security issue in a Feron Security website or service, please email feronsec@proton.me with a description, the steps to reproduce it, and any proof of concept.
We'll acknowledge your report, keep you updated while we investigate, and credit you once it's fixed if you'd like.
05Safe harbor
We won't pursue legal action against researchers who act in good faith: who avoid privacy violations and service disruption, only interact with accounts they own, and give us reasonable time to fix an issue before disclosing it publicly.
06Out of scope
- Denial of service and volumetric testing
- Social engineering and physical attacks
- Reports from automated scanners without a demonstrated impact
Last updated 8 October 2026. Questions about this page: feronsec@proton.me