Responsible Disclosure
Responsible
Disclosure
At Thread Rare, we take security and customer privacy seriously. If you believe you have discovered a security vulnerability, we encourage responsible disclosure to help us protect our users, systems and infrastructure.
Our Commitment
We appreciate security researchers and ethical hackers who responsibly identify vulnerabilities and report them privately. We are committed to investigating all legitimate reports and resolving issues in a timely manner.
Scope
This policy applies to vulnerabilities found within Thread Rare owned websites, applications, APIs, infrastructure and customer-facing services.
Reporting A Vulnerability
If you discover a security vulnerability, please report it responsibly by providing detailed information including:
- A clear description of the vulnerability.
- Steps required to reproduce the issue.
- Proof-of-concept screenshots or videos if available.
- Potential impact of the vulnerability.
- Your contact information for follow-up communication.
Guidelines
- Do not exploit vulnerabilities beyond what is necessary for testing.
- Do not access, modify or delete customer data.
- Do not disrupt services, infrastructure or systems.
- Do not publicly disclose vulnerabilities before they are resolved.
- Respect user privacy and data protection standards at all times.
Safe Harbor
Thread Rare will not pursue legal action against researchers who act in good faith and comply with this Responsible Disclosure Policy. We ask researchers to provide us reasonable time to investigate and remediate vulnerabilities before public disclosure.
Out Of Scope
- Social engineering attacks.
- Physical attacks against facilities or employees.
- Denial of Service (DoS/DDoS) attacks.
- Spam, phishing or malware distribution.
- Vulnerabilities in third-party platforms not owned by Thread Rare.
Report Security Issues
If you believe you have identified a valid security issue, please contact our security team with complete details for investigation.
