Security Architecture
Responsible Disclosure Policy.
At AegisForge, security is our primary craft. We welcome reports from independent researchers and adhere to coordinated disclosure standards.
Safe Harbor Guidelines
Researchers who discover potential vulnerabilities in AegisForge systems are granted safe harbor provided they adhere to the following rules:
- • Do not access or modify data belonging to other clients or customers.
- • Do not execute denial-of-service (DoS/DDoS) attacks against production infrastructure.
- • Do not utilize automated brute-force attacks against login or rate-limited endpoints.
- • Give our engineering team a minimum of 30 days to remediate before public disclosure.
Direct Security Contact:security@aegisforge.com
Inspect RFC 9116 security.txtRules of Engagement (RoE) Standards
Prior to any offensive testing on client assets, AegisForge requires digital signature on our standardized Rules of Engagement. This legal document specifies explicit test perimeters, excluded IP blocks, emergency contact chains, and permitted testing windows to eliminate business disruption.