Scope

​

This policy covers vulnerabilities in: (1) this website; (2) MYTSWIF Technologies, L.L.C., -operated services and infrastructure; and (3) software or deliverables provided by MYTSWIF Technologies, L.L.C., where a reporting channel is established under the applicable agreement. It does not cover third-party products or services we do not operate, or issues already reported to us.

 

How to Report

 

• Email: sales@mytswif.com

• Please include: a description of the issue, steps to reproduce it, the affected component or version, the date you discovered it, and your contact information.

 

Safe Harbor

​

To the extent permitted by law, MYTSWIF Technologies, L.L.C., will not take legal action against a researcher who: acts in good faith; makes reasonable efforts to avoid privacy violations, data destruction, or service disruption; and promptly notifies us upon discovering a potential vulnerability. This policy does not create rights beyond those provided by applicable law.

​

Our Commitments

​

• Acknowledge receipt of valid reports within 5 business days.

• Triage reports and communicate status at reasonable intervals until resolution

• Remediate confirmed vulnerabilities on a timeline commensurate with severity (target: critical issues within 30 days)

• Credit reporters who wish to be credited in future advisories, upon request

 

Requested Conduct

​

Please do not publicly disclose a vulnerability before we have had a reasonable opportunity to address it — we ask for at least 90 days' notice before public disclosure. Do not access data beyond what is reasonably necessary to demonstrate the issue.

 

Out of Scope

 

Social engineering or phishing; denial-of-service testing; physical security issues; and vulnerabilities in third-party software or services not operated by MYTSWIF Technologies, L.L.C.