Vulnerability Disclosure Policy

As a provider of internet services and the holder of a large quantity of customer information, we are very serious about security issues, privacy, online safety, and we recognise the importance of community outreach. Mweb is committed to reporting and addressing security issues through a coordinated and constructive approach which is designed to give the greatest protection for our customers. Whether you’re an Mweb staff member or customer, a software developer, or just a security conscious member of the online community, you are an important contributor to this process.

• Reporting Security Issues to Mweb:

  You may contact the Mweb Security Team by sending email to abuse@mweb.com under the following circumstances:

  • You have identified a potential security vulnerability with one of our platforms
  • You have identified a potential security vulnerability with one of our services

  Once we have received a vulnerability report, Mweb will take the following steps to address the issue:

  • Mweb requests that the reporter keep any communication regarding the vulnerability confidential for security purposes.
  • Mweb will investigate and verify the vulnerability.
  • Mweb will address the vulnerability and release an update or patch to the software. If for some reason this cannot be done quickly or at all, Mweb will provide information on recommended mitigations.
  • Mweb will publicly announce the vulnerability in the release notes of the above mentioned update.
  • Mweb may also issue additional public announcements, for example via social media, our blog, and other media channels.

• Release notes