1. Corporate Security Philosophy
Ontario Press Media Inc. values the critical contributions of the independent cybersecurity research community. We are dedicated to maintaining the highest standards of digital security, confidentiality, and integrity across all our public network infrastructure.
2. Safe Harbor Commitment
If you conduct your vulnerability research in good faith, in accordance with this policy, and without disrupting live production services or accessing private reader data, we consider your activities authorized. We will not pursue legal action or report you to law enforcement authorities.
3. Guidelines for Ethical Research
- Do not exploit a vulnerability beyond what is strictly necessary to demonstrate its presence.
- Do not execute Denial of Service (DoS/DDoS) attacks, brute-force campaigns, or automated scanning that degrades site performance.
- Do not access, download, modify, or disclose any sensitive personal data, newsroom archives, or confidential sources.
- Provide us with reasonable time (minimum 60 business days) to remediate the vulnerability before public disclosure.
4. Reporting Channel
Please submit encrypted reports to our dedicated Security Operations Team at security@ontariopressmedia.ca with complete reproduction steps and proof-of-concept logs.