Security contact

Reporting an issue

If you have found a security problem in this website or in FleetRan, write to security@fleetran.com. Include what you found, how to reproduce it, and what you think the impact is. If you would rather not use email, say so at hello@fleetran.com and we will arrange another route.

What we commit to

• We acknowledge a report within three working days.
• We tell you what we found when we have assessed it, including if we disagree.
• We will not pursue legal action against good-faith research that follows the boundaries below.
• We credit you if you want to be credited, and stay quiet if you do not.

There is no paid bounty programme. Saying that plainly is better than implying one exists.

Boundaries

Please do not, while testing:

• access, modify or delete data belonging to anyone else;
• run denial-of-service or high-volume automated attacks;
• use social engineering against people, or physical access to premises;
• publish a vulnerability before we have had a reasonable chance to fix it.

Why this page exists at all

FleetRan is being designed around rules that only mean something if they hold up under scrutiny — hours-of-service records that cannot be rewritten by anyone, including us, and a product that never records audio inside a cab. Those are architectural commitments, and an architecture nobody is allowed to examine is a promise, not a guarantee.