Report a security vulnerability
If you have found a security issue in VMgenie, please tell us. The VMgenie security team reads every report and replies to every reporter.
Email the VMgenie security team
Send vulnerability reports to security@vmgenie.com. This mailbox is monitored by the VMgenie security team and is the fastest way to reach us about a security issue.
What to include
- A short summary of the issue
- Steps to reproduce, with the affected URL or component
- The impact you believe the issue has
- Your name and how we should reach you
Encrypted reports (PGP)
If your report is sensitive, encrypt it to the VMgenie security PGP key before sending. The fingerprint is shown below; the full public key is available on request from security@vmgenie.com.
Key fingerprint:
8B2E 4F71 9D3C 6A20 1F88 9A47 2C6B E3D1 5F4A 7B90
Subject line: please prefix the subject with [Vuln] so the report is routed without delay, e.g. [Vuln] privilege escalation in VM create flow.
Our commitment to reporters
- We acknowledge every report within two business days.
- We keep you informed of progress as we triage and fix.
- We do not pursue legal action against researchers who act in good faith and follow this policy.
- We credit reporters in our changelog when a fix ships, unless you ask us not to.
What to report elsewhere
VMgenie hosts customer panels on their own domains. If you find a problem with a third-party service (your DNS provider, your cloud account, your browser), please report it to that service directly. For VMgenie panel login or billing questions that are not security related, use our contact page.