Report a Vulnerability

Aim

This policy is designed to provide security researchers and other members of the security community with clear guidelines for conducting vulnerability discovery activities directed at web properties owned or operated by Link Labs, its affiliates, or subsidiaries, and reporting discovered vulnerabilities to Link Labs under the Link Medical Diagnostic & Research Laboratories (Link Labs) Vulnerability Disclosure Program. Your participation in the program is completely optional and is governed by the terms and conditions outlined on this page. You recognize and agree to the terms and conditions of this Policy by submitting a report.

Introduction

Maintaining the safety and security of our clients’ information is a high concern and a key idea that we strive to enhance and improve. The security community provides significant contributions to the protection of businesses on a daily basis, and we know that maintaining a tight connection with them will help us enhance our own security. So please contact us if you have knowledge regarding a flaw in our system or online application.

Adding this additional program to our total security arsenal will help us enhance our security infrastructure, improve our services, and, most importantly, keep our clients’ information secure while utilizing our services.

Researchers are invited to evaluate the Link Medical Diagnostic & Research Laboratories (Link Labs) website and Web Applications using the guidelines outlined in this brief.

Before doing any Link Labs network testing or submitting a report, you must read, understand, and agree to the following terms and conditions as part of this program.

Reach

Any publicly accessible system that Link Labs owns, manages, or has control over, including any web applications contained on such websites.

Rules

• Your actions are restricted to only:
  • Testing to find a vulnerability or an indicator of a vulnerability; or
  • Information regarding a vulnerability or a relevant indication is shared with or obtained from Link Labs.
• Beyond the limited testing necessary to demonstrate that a vulnerability exists or to find an indication connected to a vulnerability, you do no harm and do not exploit any vulnerabilities.
• Except in cases where the information is directly related to a vulnerability and the access is required to establish the vulnerability’s existence, you refrain from intentionally accessing the content of any communications, data, or information that is transiting or stored on Link Labs information system(s).
• Under no condition do you remotely access, modify, or delete any material.
• You do not jeopardize the confidentiality or wellbeing of Link Labs workers or any third parties.
• You don’t jeopardize any third parties’ or Link Labs’ people or entities’ intellectual property rights or other commercial or financial interests.
• Except with express written consent from Link Labs, you may not publicly reveal or divulge to any third party any information on a vulnerability, a vulnerability sign, or the nature of data made accessible by a vulnerability.
• You don’t test for denial of service or anything else that might affect Link Labs services being available.
• You never perform social engineering on Link Labs employees, subcontractors, or clients, including spear phishing.
• You don’t try to enter any of our facilities or file servers physically.
• You do not include in your vulnerability report or any of its attachments any data that may be used to identify someone other than you, including their name, contact information, IP address, or anything of a similar nature.
• You don’t submit a lot of reports that are of poor quality.

Our Response

Link Labs is still dedicated to working with you as swiftly and honestly as is reasonable given the situation. Based on the information at our disposal, we will look into reports and could get in touch with you. Please note, reports indicated as evaluated are subject to revision awaiting our team’s final review. We’ll strive to keep you updated about our progress during the process.