Vulnerability Reporting

Makai Ocean Engineering, Inc. is committed to maintaining the security of our systems, applications, and information. We welcome good-faith reports of suspected security vulnerabilities that may affect Makai systems or services.

Reporting a Security Vulnerability

If you believe you have identified a security vulnerability affecting a Makai system, application, or service, please report it to us so that we can investigate and take appropriate action.

When submitting a vulnerability report, please include, when available:

• The system, application, or service believed to be affected;
• A description of the suspected vulnerability;
• Steps necessary to reproduce or demonstrate the issue;
• The potential security impact of the vulnerability; and
• Any additional information that may assist Makai in investigating the issue.

Security vulnerability reports may be submitted using the form below.

Good-Faith Security Research

Makai authorizes good-faith security research and the responsible disclosure of suspected vulnerabilities when conducted in accordance with applicable law and this vulnerability reporting guidance. Research should be limited to what is reasonably necessary to identify and demonstrate a potential vulnerability and should avoid disruption of services, destruction or alteration of data, impairment of system availability, or unnecessary access to personal, proprietary, classified, or other sensitive information.

If sensitive information is encountered during security research, researchers should discontinue access to that information and notify Makai as part of the vulnerability report.

Responsible Disclosure

Makai will review reported vulnerabilities and take appropriate steps to investigate and remediate confirmed security issues. We may request that a reporter allow a reasonable period of time for investigation and remediation before publicly disclosing a vulnerability.

Good-faith vulnerability reporting is not conditioned upon indefinite non-disclosure. Makai encourages researchers to coordinate public disclosure with us so that identified vulnerabilities can be appropriately investigated and addressed.