Security & Vulnerability Disclosure

Responsible Security Reports Are Welcome

If you believe you have found a legitimate security issue affecting a Techwarrior Technologies website, service, or system, we appreciate good-faith disclosure so we can review the issue.

Please provide enough information for us to understand and, where possible, reproduce the issue.

A useful report should include:

• The affected page, service, or URL.
• A clear description of the suspected vulnerability.
• Steps needed to reproduce the issue.
• Relevant screenshots, request details, or other technical information.
• An explanation of the potential security impact.

What Security Researchers Should Not Do

Good-faith reporting does not authorize intrusive testing or access to systems or information that you do not own or have permission to access.

• Do not access, copy, alter, download, or disclose customer or employee data.
• Do not attempt to obtain passwords, credentials, payment information, or private records.
• Do not use denial-of-service, load testing, spam, automated abuse, or other activity that could disrupt services.
• Do not install malware, create persistent access, or attempt to move beyond the minimum steps required to identify the issue.
• Do not publicly disclose a suspected vulnerability before Techwarrior has had a reasonable opportunity to review it.

No Bug Bounty or Payment Program

Techwarrior Technologies does not promise, offer, or imply payment for vulnerability reports. We may review legitimate reports submitted in good faith, but submission of a report does not establish a contract, entitlement, or expectation of compensation.

Messages demanding payment, threatening disclosure, or representing that Techwarrior is required to provide a reward may be treated as unsolicited commercial or abusive communications rather than responsible security disclosures.

Scope

This policy applies only to systems and websites owned or directly controlled by Techwarrior Technologies. Third-party platforms, hosting providers, plugins, software vendors, payment processors, and other external services are governed by their own security policies and disclosure programs.