Responsible Disclosure

1. OUR COMMITMENT

We are committed to maintaining a secure environment and appreciate responsible disclosure of security vulnerabilities.

2. REPORTING A VULNERABILITY

If you believe you have discovered a security vulnerability in any TTAN.IO service or system, please report it to us as soon as possible.

Please send your report to: [email protected]

Include the following information:

• A clear description of the vulnerability
• Steps to reproduce the issue (including screenshots, logs, or proof of concept)
• Your contact information (optional, but helpful for follow-up)

3. OUR RESPONSE

We will:

• Acknowledge receipt of your report within 7–15 business days after it is submitted by email
• Investigate and validate the issue
• Keep you informed of our progress
• Work to resolve the issue in a timely manner

4. GUIDELINES FOR RESEARCHERS

We ask that you:

• Do not exploit the vulnerability beyond what is necessary to demonstrate the issue
• Do not access, modify, or destroy user data
• Do not publicly disclose the vulnerability until we have had reasonable time to address it
• Do not engage in disruptive testing (e.g., denial of service, spam, social engineering)

5. SAFE HARBOR

We commit not to pursue legal action against researchers who:

• Act in good faith
• Comply with these guidelines
• Do not cause harm to our users or systems

6. RECOGNITION

With your permission, we may publicly acknowledge your contribution after the issue has been resolved.

7. CONTACT

Security reports should be sent to: [email protected]

For non-security inquiries, please use our general contact channels.

Thank you for helping us keep TTAN.IO secure.