Last updated: 14 July 2026
At Cahillbrand, we take the security of our websites, applications, and customer data seriously. We welcome responsible reports of security vulnerabilities and appreciate the efforts of security researchers who help us improve our services.
If you believe you have discovered a security issue affecting Cahillbrand, CahillPulse, or any website or application operated by us, please let us know.
Reporting a Vulnerability
Please report any suspected security vulnerabilities by emailing:
When reporting an issue, please include as much information as possible, including:
- The affected URL, page, or application.
- A description of the issue.
- Steps required to reproduce the vulnerability.
- Any screenshots or supporting evidence.
- Your name and contact details (if you would like us to respond).
The more detail you can provide, the quicker we can investigate.
Responsible Disclosure
We ask that you:
- Give us a reasonable opportunity to investigate and resolve the issue before publicly disclosing it.
- Avoid accessing, modifying, or deleting data that does not belong to you.
- Avoid disrupting our services or affecting other users.
- Only perform testing that is necessary to demonstrate the vulnerability.
Please do not attempt to exploit vulnerabilities beyond what is necessary to verify their existence.
Our Commitment
If you report a genuine security issue responsibly, we will:
- Acknowledge receipt of your report.
- Investigate the issue promptly.
- Keep you informed where appropriate.
- Work to resolve confirmed vulnerabilities as quickly as reasonably possible.
We appreciate responsible disclosure and recognise the time and effort involved in helping improve security.
Scope
This policy applies to websites, applications, and online services owned and operated by Cahillbrand, including:
- cahillbrand.co.uk
- CahillPulse
- Other applications and services operated under the Cahillbrand brand
Third-party services and platforms are outside the scope of this policy.
Bug Bounty
Cahillbrand does not currently operate a paid bug bounty programme.
Responsible disclosure is always appreciated, but reports are submitted voluntarily and do not create any expectation of financial reward.
Safe Harbour
Provided you act in good faith and follow this policy, we will not pursue legal action against security researchers for legitimate security testing carried out solely for the purpose of responsibly reporting vulnerabilities.
Contact
For security-related enquiries, please contact: