If you find a security issue in eaglecapinvesting.com, the investor portal at investors.eaglecapinvesting.com, or another site we operate, email jarom@eaglecapinvesting.com. Include the page or request involved and the steps that reproduce it. We confirm receipt and reply within 5 business days.
We authorize good-faith testing of the sites we operate ourselves, as long as it does not disrupt service, does not use another person's account, and stops at the first proof of an issue. Investor data is off limits: if you reach any, stop, do not keep it, and tell us what you reached. Third-party services we use (hosting, email, analytics) are governed by their own policies and are not covered by this one.
We do not run a bounty program. We will not pursue a report made in good faith under these terms, and we credit a reporter who asks to be credited once the issue is resolved.
The machine-readable version of this page is at /.well-known/security.txt.