Responsible Disclosure
Found a security issue in our website or products? Please tell us. We welcome reports and work with researchers to fix issues quickly.
Last updated 17 October 2026 · CoreCx AI Pte Ltd
How to report
Email contact@corecx.ai with the subject “Security report”. Include what you found, where, the steps to reproduce it and the impact you expect. Please do not include personal data you may have accessed.
In scope
The corecx.ai website and CoreCx products: iFlux, CoreSec KMS, CoreCx EL, CoreCx AI Hub and CoreCx HealthForce.
Please do
- Give us reasonable time to fix the issue before telling anyone else.
- Test only against systems you own or are allowed to test.
- Stop and report as soon as you find an issue, and delete any data you accessed.
Please do not
- Run denial-of-service, spam or social-engineering tests.
- Access, change or delete data that is not yours.
- Test against a CoreCx customer’s systems without their written permission.
What we do
We acknowledge your report within three business days, keep you informed while we investigate, and tell you when it is fixed. With your permission, we credit you once the fix is released.
Safe harbour
If you follow this policy in good faith, we will not take legal action against you for your research.