Contact Us
01908 265111

Vulnerability Disclosure Policy

Vulnerability Disclosure Policy

Contact Us: 01908 265111

Vulnerability Disclosure Policy

P&A Software Solutions are committed to addressing and reporting security issues through a coordinated and constructive approach designed to provide the greatest protection for P&A Software customers, partners, staff and all Internet users.

A security vulnerability is a weakness in our systems or services that may compromise their security. This policy applies to security vulnerabilities discovered anywhere by both P&A Software Solutions staff and by others using P&A Software Solutions services. The responsibility for this policy is with the senior management team of P&A Software Solutions who will review it on an annual process. All day-to-day staff must follow this policy and will receive regular training on how to follow it.

Reporting vulnerabilities

If you believe you have discovered a vulnerability in one of our services or have a security incident to report, please email Please indicate which product and version or service your report refers to.

Once we have received a vulnerability report, P&A Software Solutions takes a series of steps to address the issue:

  1. We will provide prompt acknowledgement of receipt of your report of the vulnerability
  2. We request the reporter keep any communication regarding the vulnerability confidential
  3. We will work with you to understand and investigate the vulnerability
  4. We will provide a timeframe for addressing the vulnerability.
  5. We will notify you once the vulnerability has been resolved, to allow retesting by the reporter if needed.
  6. We publicly announce the vulnerability in the release notes of the update. We may also issue additional public announcements, for example via social media.
  7. Release notes (and blog posts when issued) will include a reference to the person/people who reported the vulnerability, unless the reporter(s) would prefer to stay anonymous.

P&A Software Solutions will endeavour to keep the reporter apprised of every step in this process as it occurs.

We greatly appreciate the efforts of security researchers and discoverers who share information on security issues with us, giving us a chance to improve our services, and better protect our customers. In line with general responsible disclosure good practice, we ask that security researchers:


Text copyright The IASME Consortium Ltd. 2020. Modifications copyright P&A Software Solutions (UK) Ltd. This document is made available under the Creative Commons BY-SA license. To view a copy of this license visit

Have You Found Your HRM Solution?

Call P&A Software on 01908 265111 for some helpful advice or visit our Solutions page.

Find Your HR Solution