Recognition

Identified vulnerabilities are not covered by this Responsible Disclosure Policy.

By identifying and reporting security vulnerabilities in a responsible manner, Finpandatech appreciates your help in keeping our environment safe and secure. After the vulnerability is verified and fixed, we would like to add your name to our Hall of Fame as a result of the report.

Policy Compliance and Consequences

Finpandatech will not complain to law or take any civil action for the accidental violation of this policy happened in good faith. We take the activities undertaken in consistency with this policy to represent “authorized” conduct under the Computer Fraud and Abuse Act. We will not bring a Digital Millennium Copyright Act (DMCA) claim against you for bypassing the technological measure used to protect the applications in question.

Penalty

Finpandatech will notify a third party that the Research and actions taken were in compliance with the Responsible Disclosure Policy if a third party initiates legal action against you.

Public NonDisclosure

Finpandatech Security Vulnerability Program operates under a "Public NonDisclosure" Mode. Generally, under this program, one cannot make public information about vulnerabilities under this policy.

Small Print

Finpandatech is free to change the terms of this program or terminate it at any time. Finpandatech employees and their family members are not eligible for bounties under this program.