Vulnerability Disclosure Policy - Legal

Legal

Vulnerability Disclosure Policy

Last revised: 13 March 2026

Introduction

Thank you for helping keep XTOPIA safe. We value the work of the security community and encourage responsible reporting of any vulnerabilities found in our systems.

1. No Bounty Disclosure

Please note that XTOPIA does not currently operate a financial bug bounty program. We do not offer monetary rewards for vulnerability reports.

2. Reporting Guidelines

If you still like to report security findings, email findings to [email protected]. Give us a reasonable timeframe to remediate the issue. Please avoid data destruction, or service interruptions (No DDoS/Social Engineering).

3. Submission Requirements

Please include following for the submission:

A detailed description of the vulnerability.
Steps to reproduce (POC).
The potential impact.

Founded in Silicon Valley in 2000 and now a leading AI-first digital agency with 26 years of experience, XTOPIA (by XIMNET) empowers brands with cutting-edge enterprise solutions.

As a Microsoft-certified partner and Malaysia Digital (MD) status company, we specialize in Conversational AI Assistants, Business Process Automation, and Digital Transformation. From government bodies to global corporations, we help businesses achieve more by turning insights into action and conversations into conversions.

Terms & Conditions