Legal
Reporting a security vulnerability
We want to hear about security weaknesses in Procurevent. If you think you have found one, please tell us.
Last updated: 10 October 2026
How to report
Email security@procurevent.com. Please include:
- what you found and where (the page, address or feature);
- the steps to reproduce it;
- what you think the impact is;
- how we can reach you, if you would like a reply.
Please do not include another organisation's data in your report. If you came across any, tell us that you did, and not what it was.
What you can expect from us
We will acknowledge your report, tell you whether we can reproduce it and what we plan to do, and tell you when it is fixed.
What we ask of you
- Give us reasonable time to fix the issue before telling anyone else.
- Use only accounts you own or have permission to use.
- Stop as soon as you have shown the weakness exists. Do not access, change, keep or delete data that is not yours.
- Do not degrade the service for others: no denial-of-service testing, no automated high-volume scanning, no spam through our forms.
- No social engineering of our staff or customers, and no physical testing.
Our Terms of service continue to apply.