Reporting a Vulnerability

If you believe you have discovered a security vulnerability in our systems, we encourage you to report it to us. Please follow these guidelines when reporting a vulnerability:

1. Provide a Detailed Description: Include a detailed summary of the vulnerability, including the type of issue, the location, and the potential impact. If possible, include steps to reproduce the vulnerability.

2. Provide Supporting Material: Attach any supporting material, such as screenshots, proof-of-concept code, or any other relevant information.

3. Submit Your Report: Send your report to security@tmetrics.com. Ensure that your report is encrypted if it contains sensitive information.

‍

‍Scope

This VDP applies to the following assets and services:

• www.tmetrics.com
• Any subdomains of tmetrics.com
• T-Metrics applications and APIs

‍

Out of Scope

The following issues are not considered in scope for this program:

• Third-party services or applications
• Social engineering attacks
• Physical security vulnerabilities

‍

Our Commitment

When you report a vulnerability to us, we commit to:

1. Acknowledging receipt of your report within 3 business days.
2. Providing an estimated timeline for addressing the vulnerability.
3. Keeping you informed about the status of the fix.
4. Providing recognition if you are the first to report a vulnerability and your report leads to a change.

‍

Safe Harbor

We will not take legal action against individuals who report vulnerabilities, provided they:

1. Adhere to the guidelines outlined in this VDP.
2. Do not exploit the vulnerability beyond what is necessary to confirm its existence.
3. Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our services.

‍

Contact

If you have any questions about this VDP, please contact us at security@tmetrics.com.

Thank you for helping us keep T-Metrics safe and secure!