{"id":8895,"date":"2023-08-23T12:07:23","date_gmt":"2023-08-23T06:37:23","guid":{"rendered":"https:\/\/stg.tftus.com\/?page_id=8895"},"modified":"2023-08-23T12:07:23","modified_gmt":"2023-08-23T06:37:23","slug":"vulnerability-disclosure-program","status":"publish","type":"page","link":"https:\/\/stg.tftus.com\/blogs\/vulnerability-disclosure-program\/","title":{"rendered":"Vulnerability Disclosure Program"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t

Vulnerability Disclosure Program<\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\u00a0<\/h2>

Welcome to the TFT VDP Policy<\/b><\/h2>

At Think Future Technologies (TFT), security is paramount. We invite security researchers and ethical hackers to participate in our Vulnerability Disclosure Program. By reporting potential vulnerabilities and security issues in our technology services, libraries, solutions, and frameworks, you help us ensure the highest level of security for our clients. We value your expertise and partnership in enhancing our offerings and protecting our clients’ business outcomes. Join us in building a safer technological future.<\/span><\/p>

Disclosure Policy<\/strong><\/h3>
  1. We request that you inform us promptly upon discovering a potential security vulnerability.Our team will work quickly to resolve the issue.\u00a0<\/span><\/li>
  2. We ask for a reasonable time period to resolve the issue before it is disclosed to the public or any third-party.<\/span><\/li>
  3. We kindly request that you make a sincere effort to avoid violating privacy, damaging data, or disrupting our services in any way.<\/span><\/li><\/ol>

    Reporting Guidelines<\/strong><\/h3>
    1. Please provide detailed reports with clear textual description of the report along with steps to reproduce the vulnerability.<\/span><\/li>
    2. You must include attachments such as screenshots or PoC code as necessary.<\/span><\/li>
    3. Include a clear attack scenario. How will this affect us exactly?<\/span><\/li>
    4. Submit one vulnerability per report, unless you need to chain vulnerabilities to provide impact.<\/span><\/li><\/ol>

      If you have discovered any vulnerability in the TFT platform, please submit it to our vulnerability disclosure program hosted by BugBase<\/span>.<\/span><\/p>