Security

Our commitment

HIRLUK is building enterprise-grade controls for authentication, data protection, and secure operations. Our security program is actively maturing; we welcome responsible reports from researchers and customers.

Responsible disclosure

If you believe you have found a security vulnerability in HIRLUK products or infrastructure, please report it to us privately. Do not publicly disclose issues until we have had a reasonable opportunity to investigate and remediate.

How to report

Email admin@progiletech.com with:

• A clear description of the issue and potential impact
• Steps to reproduce (proof-of-concept if available)
• Affected URLs, accounts, or components
• Your contact information for follow-up

What to expect

• Acknowledgment within 3 business days for valid reports
• Status updates as we investigate and remediate
• Notification when a fix is deployed or a mitigation is in place

We do not operate a public bug bounty program at this time.

Safe harbor

We will not pursue legal action against researchers who act in good faith, avoid privacy violations and service disruption, and give us time to remediate before public disclosure.