Responsible disclosure and remediation targets.
Submit findings via serviceautomations.ai security contact with reproducible steps. Avoid destructive testing on production tenants.
| Severity | Target fix timeline |
|---|---|
| Critical (active exploit / systemic confidentiality) | < 72 hours for containment/mitigation start |
| High | < 7 days |
| Medium | Best effort next release cycle |
| Low | Backlog prioritized |