Skip to content
Last updated · October 7, 2026

Responsible disclosure

We support the responsible sharing of security vulnerabilities found in our products. We work with researchers through coordinated disclosure and provide safe harbor for good-faith research.

01Scope

The TegmenSoft SDK and device agent, our website (tegmensoft.com.tr) and our cloud management panel are in scope. Third-party services and customers' own customizations are out of scope.

02How to report

Send your findings to contact@tegmensoft.com.tr. You can also reach us through our LinkedIn company page.

  • Affected product, version or address
  • Steps to reproduce
  • Possible impact and a proof of concept if available
  • An address where we can reach you

03Response times

  • First response: within 48 hours
  • Assessment and remediation plan: 5 business days
  • Patch for critical vulnerabilities: within 30 days

04What we ask of you

  • Do not disclose the issue publicly until we have fixed it.
  • Do not access, modify or delete other people's data.
  • Avoid tests that degrade the service (such as DoS).
  • Use the vulnerability only as much as needed to show it exists.

05Safe harbor

We will not take legal action against good-faith research carried out in line with this policy. Once a fix is released we will credit your contribution by name if you wish.