Vulnerability disclosure policy

Report vulnerabilities to security@clearpointstrategy.com with affected URLs, reproduction steps, and impact.

This policy covers www.clearpointstrategy.com and next.clearpointstrategy.com. Test only accounts and data you control. Avoid service disruption, social engineering, and accessing other people’s data. If you encounter sensitive data, stop and report it without retaining or sharing it.

For good-faith research that follows this policy, ClearPoint will not initiate legal action. This commitment does not bind third parties. Coordinate public disclosure with us so we have a reasonable opportunity to remediate.

This policy offers no monetary rewards.