Security
Report a Security Vulnerability
If you believe you have found a security vulnerability in Group Advisors' websites or services, we want to hear from you and we will work to fix valid issues.
Last Updated: October 12, 2026
How to Report
Report it to security@groupadvisors.com. Please include a description of the issue, the affected domain or URL, and steps to reproduce it.
Scope
- groupadvisors.com, sureadvisors.com, login.groupadvisors.com, api.groupadvisors.com
- Other Group Advisors subdomains and services
Out of Scope
- Spam or social engineering
- Denial-of-service, resource exhaustion, or automated scanning that degrades service
- Reports from automated scanners without a demonstrated impact
- Physical attacks
Our Commitment
- We will acknowledge your report within 5 business days.
- We will triage and keep you informed of our progress toward a fix.
- We will not pursue legal action against good-faith research that respects user privacy, avoids service degradation, and uses the intake above.
- We do not currently offer monetary bounties; we will credit researchers who ask for it when the fix is published.