Vulnerability Disclosure Policy

For communicating security reports or issues, please contact infosec@wcbradley.com by email.

Our reporting targets are:

• 5 business days from receiving an issue report acknowledging receipt of the issue
• 10 business days for reporting status of submitted issues until issue closure
   

*Please do not disclose any sensitive personal information when reporting any potential vulnerabilities.

Reports pertaining to vulnerabilities must include the following information*:

• A brief description of the problem and to which vulnerable system the report applies: web, mobile application, or IoT hardware
• Hardware and software tools used to replicate the event
• Device model number identification
• Firmware versions for each device used
• Date and time of the incident recorded
• Method for replicating the vulnerability