Glory Enterprise Security

Security Researchers

Glory Global Solutions accepts vulnerability reports from all sources, including independent security researchers, industry partners, vendors, customers and consultants. Glory defines a security vulnerability as an unintended weakness or exposure that could be used to compromise the integrity, availability or confidentiality of our digital services, products, systems or information.

We encourage responsible security research across Glory’s digital presence, services and products. You may conduct vulnerability research and testing only on Glory services and products to which you have authorised access. Your research and testing must not involve:

1. Accessing, or attempting to access, accounts or data that does not belong to you
2. Any attempt to modify or destroy any data that does not belong to you
3. Executing or attempting to execute any “Denial of Service” attack

4. Testing in a manner that would degrade the operation of any Glory systems

5. Sending unsolicited or unauthorised email, spam, or junk email

6. Testing third-party applications, websites or services that integrate with Glory or connect to Glory systems

7. Posting, transmitting, uploading, linking to, sending, or storing any malicious software

    

Scope

This programme applies to Glory’s digital presence, including any digital assets owned, operated or maintained by Glory Global Solutions, such as glory-global.com and related online services. It does not authorise testing of third-party systems, customer environments or any assets that are not owned, operated or maintained by Glory.

Our Commitment to Researchers

• Trust. We maintain trust and confidentiality in our professional exchanges with security researchers.
• Respect. We treat all researchers with respect and recognize your contribution for keeping our customers safe and secure.
• Transparency. We will work with you to validate and remediate reported vulnerabilities in accordance with our commitment to security and privacy.
• Common Good. We investigate and remediate issues in a manner consistent with protecting the safety and security of those potentially affected by a reported vulnerability. 

What We Ask of Researchers

• Trust. We request that you communicate about potential vulnerabilities in a responsible manner, providing sufficient time and information for our team to validate and address potential issues.
• Respect. We request that researchers make every effort to avoid privacy violations, degradation of user experience, disruption to production systems, and destruction of data during security testing.
• Transparency. We request that researchers provide the technical details and background necessary for our team to identify and validate reported issues, using the form below.

• Common Good. We request that researchers act for the common good, protecting user privacy and security by refraining from publicly disclosing unverified vulnerabilities until our team has had time to validate and address reported issues.

   

Vulnerability Reporting

Glory Global Solutions recommends that security researchers share the details of any suspected vulnerability affecting an asset owned, controlled or operated by Glory, or that could reasonably impact the security of Glory and its users, using the reporting channel provided by Glory. The Glory security team will acknowledge receipt of each vulnerability report, conduct an appropriate review and take action towards resolution where required.

By submitting a vulnerability report, you acknowledge that Glory values your input but does not commit to monetary rewards, and no reward should be expected.