DOCUMENT VERSION: 1.0LAST REVISED: March 1, 2026
Vulnerability Disclosure Policy
EXECUTIVE SUMMARY: Autvy welcomes security researchers and ethical hackers to identify and responsibly disclose potential security flaws.
1. Safe Harbor Terms
Autvy pledges not to initiate legal action against security researchers who discover and report vulnerabilities in good faith under this policy.
We ask that researchers avoid degrading production services, accessing customer data, or publishing details prior to coordinated disclosure.
2. Reporting Channel & Response SLA
Send encrypted reports with reproducible proofs-of-concept to [email protected].
We provide initial acknowledgment within twenty-four (24) hours, an engineering severity assessment within 72 hours, and regular progress updates until resolved.