Teisinė informacija

Saugumas / pažeidžiamumų atskleidimas (VDP)

Kaip atsakingai pranešti Blast Audit apie saugumo pažeidžiamumus.

Paskutinį kartą atnaujinta: 2026 m. spalio 14 d.

Rodoma versija anglų kalba, kol šį puslapį verčiame.

Pasitikėjimo centras

SOC 2 Type 2 ataskaita parengta su Sensiba

NEXT BP kartu su Sensiba parengė Blast Audit SOC 2 Type 2 ataskaitą, apimančią saugumą, prieinamumą ir konfidencialumą 2026-03-01 – 2026-05-31 laikotarpiu.

Ataskaita apima NEXT BP „Software as a Service“ sistemą. Tinkami klientai ir potencialūs klientai gali paprašyti visos ataskaitos pagal NDA per mūsų Trust Center.

Prašyti prieigos prie Trust Center

Išduotas ISO 27001:2022 sertifikatas

NEXT BP išduotas ISO 27001:2022 sertifikatas, apimantis Blast Audit kūrimą, plėtrą, eksploatavimą ir palaikymą. Sertifikatas pasiekiamas per mūsų Trust Center.

Blast Audit (NEXT BP) welcomes responsible disclosure of security vulnerabilities.

Report a vulnerability

Preferred: Submit a report using this form:

Report a vulnerability

Backup contact:

Email: security [at] blast-audit.com

Please include:

A clear description
Steps to reproduce
Affected URL(s)/endpoint(s)
Impact assessment
Proof-of-concept (text or link)

Scope

In scope:

blast-audit.com and relevant subdomains (e.g., app / api)
Any other public web assets owned and operated by Blast Audit

Out of scope:

DoS/DDoS, load/stress testing
Social engineering (phishing/vishing), physical attacks, threats/extortion
Automated scanning that disrupts availability
Issues in third-party services not controlled by Blast Audit

Safe Harbor

We support good-faith security research.
If you avoid data access beyond what is necessary, do not disrupt services, test only in-scope assets, and report promptly, we will not pursue legal action against you for your research.

Response targets

Acknowledgement: within 72 hours
Initial triage: within 7 days

No bounty

This is a vulnerability disclosure program. We do not currently offer monetary rewards.