Responsible Disclosure Policy

Reporting Security Issues 
 If you discover a vulnerability in any GrintOps service, platform, or open-source integration, please: 
 
 Email: support@grintops.com 
 Do not publicly disclose until resolved 
 Provide detail: affected service, reproduction steps 
 
 Recognition 
 
 Valid reports may receive public acknowledgment or bounty 
 Severity and impact determine response priority 
 
 Our Commitment 
 
 We take security reports seriously and aim to respond within 2 business days