Responsible
Disclosure.
Catalyst Alpha Group Holdings takes the security of its digital infrastructure seriously. We welcome responsible disclosure of security vulnerabilities from researchers and the broader security community.
Reporting a Vulnerability
If you believe you have discovered a security vulnerability in any CAG Holdings digital property, we ask that you report it to us privately before public disclosure. This allows us to investigate and address the issue responsibly.
Please send your report to security@catalystalphagroup.com. Please include a clear description of the vulnerability, the affected system or URL, steps to reproduce the issue, and any supporting evidence.
We commit to acknowledging your report within five business days and to keeping you informed of our progress. We ask that you allow us reasonable time to investigate and remediate before any public disclosure.
We do not pursue legal action against researchers who act in good faith, follow responsible disclosure practices, and do not access, modify, or exfiltrate data beyond what is necessary to demonstrate the vulnerability.