Vulnerability Disclosure Policy for Newtechsa.com
Last Updated: 8/24/2023
- Introduction
Newtechsa.com is committed to ensuring the security of its website and protecting the personal information of its users. We value the security community and encourage responsible disclosure of any security vulnerabilities that may be identified on our platform.
- Scope
This Vulnerability Disclosure Policy (VDP) covers all aspects of Newtechsa.com, including its website, applications, and associated services.
- Responsible Disclosure
If you believe you have discovered a security vulnerability on Newtechsa.com, we encourage you to disclose it to us in a responsible manner. We appreciate your efforts to protect our users and our systems.
- Guidelines for Responsible Disclosure
a) Report the Vulnerability: Please report the security vulnerability to us as soon as possible via email at [[email protected]]. Provide a detailed description of the vulnerability, including the steps to reproduce it and any proof-of-concept code or screenshots that may be relevant.
b) Provide Ample Information: Include your contact information in the disclosure so that we can get in touch with you if we need additional information or to acknowledge your contribution
c) Act Ethically and Responsibly: Do not attempt to exploit the vulnerability beyond the minimal amount of testing required to prove its existence. Do not access, modify, or delete data from our systems or those of our users. Do not share the information about the vulnerability with anyone else until we have resolved the issue.
d) Legal Safe Harbor: Newtechsa.com commits not to pursue legal action against security researchers who follow the guidelines of this Vulnerability Disclosure Policy.
- Exclusions
The following activities are strictly prohibited and may result in legal action:
a) Any attempt to harm Newtechsa.com or its users.
b) Accessing, modifying, or deleting data from our systems or those of our users.
c) Conducting any form of denial-of-service (DoS) attack or disrupting our services.
d) Engaging in any other malicious or unethical activities.
5. Our Response.
Upon receiving your vulnerability report, we will acknowledge the receipt within 48 hours. Our security team will promptly review and investigate the reported issue. We will make reasonable efforts to keep you informed of our progress and expected resolution timeline.
6. Recognition and Reward.
We believe in recognizing the efforts of security researchers who responsibly disclose security vulnerabilities to us. Depending on the severity and impact of the reported vulnerability, we may offer recognition and a reward as a token of our appreciation.
7. Policy Updates.
This Vulnerability Disclosure Policy may be updated from time to time without prior notice. Please refer to the latest version of this policy on our website.
8. Contact Information.
If you have any questions or need further information about this Vulnerability Disclosure Policy, please contact us at [email protected].
By responsibly disclosing security vulnerabilities to Newtechsa.com, you contribute to a safer online environment, and we appreciate your collaboration in keeping our platform secure. Thank you for helping us protect our users and their data.