Responsible Disclosure Policy Responsible Disclosure Policy

SCOPE 

This policy applies to vulnerabilities affecting systems, applications, websites, APIs, and services owned and operated by Tein Technology. 

HOW TO REPORT A VULNERABILITY 

Please send your vulnerability report to: Email: security@teintechnology.com To help us investigate and address the issue efficiently, please include:

• A detailed description of the vulnerability.
• The affected system, application, URL, or service.
• Steps required to reproduce the issue.
• Proof-of-concept code, screenshots, logs, or other supporting evidence where appropriate.
• Your contact information for follow-up questions.

WHAT WE ASK OF RESEARCHERS

• Act in good faith and avoid privacy violations, destruction of data, or interruption of our services.
• Do not exploit a vulnerability beyond what is necessary to demonstrate its existence.
• Do not access, modify, download, or delete data belonging to others.
• Do not perform denial-of-service (DoS), distributed denial-of-service (DDoS), social engineering, phishing, spam, physical attacks, or other disruptive activities.
• Do not attempt to gain persistent access to our systems.
• Keep information about the vulnerability confidential until we have had a reasonable opportunity to investigate and remediate the issue.

WHAT YOU CAN EXPECT FROM US

• Acknowledge receipt of your report within five (5) business days.
• Review and validate the reported vulnerability.
• Work to remediate confirmed vulnerabilities in a timely manner based on their severity and risk.
• Keep you informed of the progress of our investigation where appropriate.
• Not initiate legal action against researchers who comply with this policy and act in good faith.

SAFE HARBOR

Tein Technology considers security research conducted in accordance with this policy to be authorized. We will not pursue legal action or initiate complaints against individuals who:

• Make a good-faith effort to comply with this policy.
• Avoid causing harm to our systems, customers, employees, or business operations.
• Promptly report discovered vulnerabilities and provide sufficient information for verification.

EXCLUSIONS

The following activities are not permitted under this policy:

• Social engineering attacks against employees, contractors, customers, or partners.
• Physical security testing.- Denial-of-service (DoS/DDoS) attacks.
• Automated vulnerability scanning that generates excessive traffic or negatively affects system availability.
• Accessing, modifying, deleting, or exfiltrating customer or company data.
• Malware deployment or persistence testing.
• Any activity that violates applicable laws or regulations.

DISCLOSURE

We request that researchers do not publicly disclose vulnerabilities until:

• The vulnerability has been remediated, or
• Tein Technology has provided written authorization for disclosure.

RECOGNITION

We appreciate the contributions of the security research community. While Tein Technology does not currently operate a bug bounty program, valid and responsibly disclosed vulnerabilities may be acknowledged at our discretion.

POLICY UPDATES

Tein Technology reserves the right to amend this Responsible Disclosure Policy at any time. Any changes will be published on this page.

Last Updated: June 2026

Contact: security@teintechnology.com