Responsible Vulnerability Disclosure Policy

At Veritran, we are committed to protecting the security of our products, services, and our customers' information.

If you believe you have identified a potential security vulnerability in any of our products, platforms, or services, we encourage you to report it responsibly so we can investigate and take the appropriate actions.

What should your report include?

To help us assess the reported vulnerability, please include:

• Description of the vulnerability. 
• Affected product, service, or URL. 
• Steps to reproduce the issue. 
• Supporting evidence (screenshots, logs, or proof of concept, if available). 
• Potential impact. 
• Contact information, if additional details are required. 

How to report a vulnerability

Please submit your report to:

security@veritran.com

Scope

This policy applies to Veritran's products, applications, platforms, and services.

Our commitment

Upon receiving a vulnerability report, Veritran will:

• Acknowledge receipt of the report. 
• Assess the reported information. 
• Manage the vulnerability through its internal processes. 
• Maintain the confidentiality of the information shared during the process. 

We appreciate your collaboration in helping us continuously improve the security of our products and services.

Note: This policy does not constitute a Bug Bounty program. Veritran appreciates vulnerability reports submitted in good faith and will handle each report in accordance with its internal vulnerability management processes.