Security Disclosure Policy

Reporting a Vulnerability

SteboHost takes security seriously. If you believe you have found a security vulnerability in our platform, we encourage you to report it to us responsibly.

Email: security@stebohost.com

Please include:

A detailed description of the vulnerability
Steps to reproduce the issue
Potential impact assessment
Any suggested remediation

Response Timeline

Acknowledgement: within 48 hours
Initial assessment: within 5 business days
Fix or mitigation: depends on severity (critical: 7 days, high: 30 days, medium: 90 days)
Public disclosure: after fix is deployed, coordinated with reporter

Scope

In scope: stebohost.com and all subdomains, our customer portal, admin interface, and API endpoints.

Out of scope: social media accounts, third-party infrastructure we do not control, denial-of-service attacks, social engineering.

Safe Harbor

We will not pursue legal action against researchers who:

Respect user privacy and do not access or modify data that is not theirs
Do not degrade service quality or availability
Provide reasonable time for remediation before public disclosure
Report vulnerabilities in good faith

Acknowledgments

With permission, we will acknowledge security researchers who help us improve our platform's security on our acknowledgments page.

Contact

General support: support@stebohost.com · +254 703 610 464