Responsible Disclosure Policy

TD Watts Consulting, LLC ("TD Watts") takes the security of our systems and data seriously. We value the contributions of security researchers and the broader community in helping us identify and address potential vulnerabilities. This Responsible Disclosure Policy outlines how to report security vulnerabilities and the expectations for both parties.

1. Scope

This policy applies to the following:

• The tdwatts.com website and associated subdomains.
• Publicly accessible TD Watts web applications and APIs.
• Infrastructure components supporting our public-facing services.

This policy does not cover vulnerabilities in third-party services we use but do not own, or issues requiring physical access to our facilities.

2. What to Include in a Report

To help us address the issue efficiently, please include:

3. Guidelines

We ask that you:

• Provide sufficient detail to reproduce and validate the vulnerability.
• Do not access or modify data that does not belong to you.
• Do not perform denial-of-service attacks or degrade service availability.
• Do not publicly disclose the vulnerability until we have had a reasonable time to remediate it.
• Avoid violating privacy laws or compromising the data of others.
• Act in good faith and avoid intentional harm.

4. Our Commitment

5. Contact

All security reports should be sent to security@tdwatts.com. Please use a descriptive subject line such as "Vulnerability Report: [Brief Description]." For our security practices and controls, see our Security Overview. For all other contact options, see the directory below.