Report Vulnerability

At SIWEC, we value the trust of our community. If you have found a security vulnerability on our website or systems, we encourage you to report it responsibly so we can address it quickly.

How to Report

Please send details of the vulnerability to:
info@siwec.org.sg

When reporting, include:

• A clear description of the issue
• Steps to reproduce it (if possible)
• Any screenshots, proof-of-concept, or technical details that can help us understand the issue

What We Ask of You

To keep everyone safe, we request that you:

• Do not exploit the vulnerability beyond what is necessary to demonstrate it
• Do not access, modify, or delete data that does not belong to you
• Do not share the vulnerability publicly until we have had a chance to fix it
• Do not use automated scanners or tools that may disrupt our services

What You Can Expect From Us

• We will acknowledge your report within 5 working days
• We will investigate and take steps to fix the issue
• If we need more details, we’ll reach out to you directly
• Once the issue is resolved, we’ll inform you

Scope

This program covers vulnerabilities in SIWEC’s publicly accessible websites and online services. Internal systems, third-party services, and physical security are out of scope.

Recognition

While we do not offer monetary rewards, we deeply appreciate your effort in helping us protect our users. With your consent, we may acknowledge your contribution on our website.

Thank You

By reporting responsibly, you help us keep SIWEC’s digital spaces safe for everyone.