VULNERABILITY DISCLOSURE
Found a problem?
Tell us.
If you find a security weakness in our website, here is what to look at, how to report it, and how we’ll treat you when you do.
Effective October 2026
Why this page exists
People trust us with their names, prayers and questions. If you find a security weakness in our website, we want to hear about it so we can fix it quickly. This page explains what to look at, how to tell us, and how we'll treat you when you do. We appreciate anyone who helps keep our church family safe.
What's included
This program covers gatewayshreve.com and everything served from it, including its pages and the forms behind them (Plan your visit, Who is Jesus?, the livestream viewer count and the website's visit counts).
What's not included
Services we use but don't run are outside this program, including Realm (online giving), YouTube, Vimeo, Google Workspace (our email), our web host's servers, the Assemblies of God and Louisiana Assemblies of God websites, and our social media accounts. Please report problems with those services to the companies that run them.
We also don't need reports about missing best-practice headers with no real impact, problems that only affect outdated browsers, or the number of forms someone can send.
Please don't
Look only as far as you need to show the problem exists. Please don't:
- View, change, save or delete anyone else's information. If you come across personal information, stop and tell us.
- Send real submissions through our forms to test them. Each one goes straight to a member of our staff or a pastor. If you must test a form, send one, with "Security test" in the name.
- Slow the site down or knock it offline, including heavy automated scanning.
- Try to trick our staff, volunteers or members, or test anything at our building.
- Share the problem with anyone else until we've fixed it.
How to report it
Email info@gatewayshreve.com with "Security report" in the subject. Tell us what you found, the page or address involved, the steps to see it for ourselves, and what someone could do with it. Screenshots help. You can report without giving your name.
What you can expect from us
We'll confirm we received your report within five business days (our office is open Monday through Thursday). We'll keep you updated while we work on it and let you know when it's fixed. With your permission, we're glad to thank you by name on this page.
We're a local church, not a company, so we don't offer cash rewards.
Our promise to you
If you follow this page in good faith, we won't take legal action against you or report you to law enforcement for your research, and we'll treat your work as helpful, not as an attack. If something isn't clear, ask us before you go further.