You must submit one report for each distinct discovery your are reporting.

You are not allowed to add, modify or delete data from any vulnerable asset you could discover.

You must avoid to test assets during working hours.

You are not allowed to communicate publicly any discovery without our explicit authorization.

You are supposed to understand and comply to the French law, anything illegal will be prosecuted.