Security

Report a security issue

The security of our systems and of the data entrusted to us by clients, partners and XGSLab™ users is a priority for SINT Srl. If you believe you have found a vulnerability or a possible data breach, please let us know: we review every report.

Security contact
security@sint.eu
We acknowledge every report within 3 business days.

What you can report

Any issue that could affect the security of our systems or of the data we hold.

Vulnerabilities

Weaknesses in our websites, web applications, XGSLab™ licensing services or other systems exposed on the Internet.

Data breaches

Personal or company data that appears to be exposed, published online or accessed without authorisation.

Phishing & impersonation

Emails, invoices, websites or phone calls that falsely use the name of SINT Srl or XGSLab™.

Compromised accounts

Signs that an account, mailbox or device belonging to our staff may have been compromised.

How to report

Send an e-mail to our security team, in English or Italian.

Please include as much of the following as you can:

  • a short description of the issue and its possible impact;
  • the affected system, URL or product (and version);
  • the steps needed to reproduce it, with screenshots if useful;
  • date and time when you noticed it;
  • your name and how we can contact you (optional: anonymous reports are accepted).

Security contact

security@sint.eu Machine-readable contact: /.well-known/security.txt SINT Srl operates the www.sint.eu and www.xgslab.com websites.

Please act responsibly

Help us protect our users while we investigate.

Do

  • Report the issue to us as soon as possible.
  • Use only what is strictly necessary to demonstrate the problem.
  • Keep the details confidential until we have fixed it.

Don't

  • Access, modify, copy or delete data that is not yours.
  • Run denial-of-service, mass scanning or brute-force tests.
  • Use social engineering or phishing against our staff.
  • Disclose the issue publicly before it has been resolved.

What happens next

Every report follows the same path.

  1. AcknowledgementWe confirm receipt within 3 business days.
  2. AssessmentWe verify the report and assess its severity, including any impact on personal data.
  3. ResolutionWe fix the issue and keep you informed of progress.
  4. ClosureWe let you know when it is solved and, if you wish, thank you publicly.
Good-faith reporting

We will not take legal action against anyone who reports an issue in good faith and follows these guidelines. SINT Srl does not currently run a paid bug bounty programme.

Other requests

Not a security issue? These contacts will help you faster.

Questions about your personal data?

To access, correct or delete your personal data (GDPR, Articles 15–22), write to privacy@sint.eu or read our Privacy Policy.

Technical support for XGSLab™?

For licences, installation or software questions, please use the Helpdesk.

Your report will be processed only to handle the security issue, as described in our Privacy Policy.
Last updated: 22 October 2026.