Vulnerability Disclosure Policy

Telos Technologies · Version 1.0 · Effective September 4, 2026

1. Purpose

Telos Technologies welcomes reports of security vulnerabilities in the Telos LTC product and our systems from customers, security researchers, and the public. This policy explains how to report an issue and what to expect from us.

2. How to Report

  • Email: security@telosltc.com (routes to our security team). Reports may also be sent to support@telosltc.com.
  • Please include enough detail to reproduce the issue (affected URL/component, steps, and impact).
  • Anonymous and confidential reporting is welcome. You do not need to identify yourself. We keep the reporter's identity and report contents confidential and will not share them outside the response team without the reporter's consent, except as required by law.

3. Our Commitment (Safe Harbor)

If you make a good-faith effort to comply with this policy during your research, we will:

  • Acknowledge your report within 5 business days.
  • Work with you to understand and validate the issue and keep you informed of remediation progress.
  • Not pursue or support legal action against you for good-faith research consistent with this policy.

4. Good-Faith Guidelines

  • Do not access, modify, or delete data that is not yours; use only test accounts you control.
  • Do not degrade service (no denial-of-service, spam, or social engineering of staff or customers).
  • Do not access, store, or disclose ePHI or other customer data; if you encounter it, stop and report immediately.
  • Give us reasonable time to remediate before any public disclosure.

5. Handling & Routing

Reports are received by our security team, logged and triaged for severity per our Vulnerability Management and Incident Response processes, and routed to the responsible owner for remediation. Significant issues are escalated to leadership.

6. Review

This policy is reviewed at least annually. It is referenced from /.well-known/security.txt so external parties can find our reporting contact.

Contact: security@telosltc.com