Responsible Disclosure Policy

Last updated: November 13, 2026

MG Digital Innovations LLC is committed to the security of our website, our clients, and our visitors. If you find a vulnerability, we welcome responsible disclosure.

1. Scope

• byangelgutierrez.com and its subdomains (including readiness.byangelgutierrez.com)
• Forms, tools, and pages we operate on those domains

Vulnerabilities in third-party services we use (such as Calendly or beehiiv) should be reported directly to those vendors.

2. What to Report

• Unauthorized access to private data or systems
• Cross-site scripting (XSS) or code injection
• Authentication or session management flaws
• Exposed endpoints or misconfigured integrations

Out of scope: social engineering, physical security, denial-of-service testing, and automated scans run without prior permission.

3. How to Report

Submit your report through our Contact page, selecting “General Inquiry/Support” and starting your message with “Security Report.” Please include:

• A description of the issue
• Steps to reproduce
• The potential impact
• Supporting evidence (screenshots or proof-of-concept)

4. Guidelines

• Do not access, modify, or delete data that is not yours
• Do not degrade site availability or integrity
• Do not publicly disclose the issue before we respond
• Stay within the scope above and within the law

5. Our Commitment

• We will acknowledge valid reports within 5 business days
• We will investigate and work in good faith to fix confirmed issues
• With your consent, we may credit you for the discovery

We do not offer monetary rewards at this time.

6. Safe Harbor

We will not pursue legal action against anyone who reports a vulnerability in good faith and follows this policy.