On this page, you can report a vulnerability, security issue, or other security finding related to Suncomet’s services. Please use the form below to submit your report. This channel is also published in the security.txt file at suncomet.
What can be reported on the form
- A vulnerability or security issue in a Suncomet service, such as DNS, web hosting, email, or the control panel.
- Suspected data breach or misconduct related to Suncomet's services.
- A legally authorized request from a government agency or other entity for domain name registration information. The process for handling these requests is described at suncomet.
What to include in the notice
- Description of the observation and the service or address it concerns.
- The steps needed to reproduce the issue, along with any screenshots (as links) or log excerpts.
- The date of the observation and your assessment of its severity.
- Please fill in the contact information fields on the form so we can get back to you.
How we handle the report
We will acknowledge receipt within three business days. We will review the report, prioritize it based on its severity, and inform you of the outcome. No adverse action will be taken against the reporter for a report made in good faith.
Technical details will not be disclosed until the fix has been verified. Any disclosure will be coordinated with the reporter.
Languages
We process reports in Finnish, Swedish, and English.