Defence in depth
Security & responsible disclosure
How DBE reduces digital risks and wants to receive safe notifications of vulnerabilities.
No system is immune to hacking
DBE opts for multiple defense layers, minimal rights, secure configuration, updates, logging, backups and incident response. Absolute invulnerability cannot and must not be promised.
Report vulnerability
Do not send sensitive personal data or exploit code through a standard form. Email contact@darkblueestates.com with the subject “Security” to request the secure reporting channel. Do not carry out destructive testing or access third-party data.
Public launch
Before launch, the work includes hardening, administrator MFA, dependency and secret scanning, WAF and rate limiting, backup and recovery tests, logging, a register of data processors and an independent penetration test of sensitive components.