This page explains how to report a security concern about a Visualsoft product or service, and where Visualsoft publishes security-related information.
Report a security concern
If you believe you have found a security vulnerability in VisualBase, VisualERP, or a Visualsoft-hosted service, please contact us before disclosing it publicly.
- Email: security@visualsoft.com
- Phone (secondary contact): +966 92 000 8720. Please do not give vulnerability details by phone.
Please include the product and version, the environment type, the steps needed to reproduce the issue, and the impact you observed. Do not include passwords, personal data, or customer records in your report.
What to expect
We acknowledge reports within 2 business days, assess them, and keep the person who reported the issue informed of progress until it is resolved. Visualsoft does not currently run a reward programme for reports.
Security fixes and supported versions
- Security fixes are provided for product lines in a supported lifecycle state. See /products-lifecycle-policy.
- A security fix may require moving to the latest supported maintenance release.
- Technology and compatibility boundaries for each product generation are listed in /visualbase/support-matrix.
- Changes delivered in each release are described in /visualbase/release-notes.
security.txt
Our contact details for security researchers are also published in machine-readable form at https://visualsoft.com/.well-known/security.txt (internet standard RFC 9116).
Security advisories
No public security advisories have been published on this page. Advisories will be listed here when issued.
Customer environments
Information about a specific customer environment, including deployment history, is not published on this website. It is available to authorized customer contacts through the Visualsoft support portal or a formal support request.