DO YOU NEED TO LEARN HOW TO CONNECT YOUR LIFELINE V+ CLICK HERE

Search

Tunstall Ireland's Vulnerability Disclosure Policy

Vulnerability Disclosure Philosophy

Tunstall Ireland (‘the Company’) believes effective disclosure of security vulnerabilities requires mutual trust, respect, transparency and common good between Tunstall Ireland and Security Researchers. Together, our collective expertise promotes the continued security and privacy of Tunstall Ireland customers’ data, products, and services.

Security Researchers

Tunstall Ireland accepts vulnerability reports from all sources such as independent Security Researchers, industry partners, vendors, customers and consultants. Tunstall Ireland defines a security vulnerability as an unintended weakness or exposure that could be used to compromise the integrity, availability, or confidentiality of our products and services.

Scope

This policy applies to any digital assets owned, operated, or maintained by Tunstall Ireland or any of its subsidiaries, including public-facing websites, SaaS platforms and IoT devices.

Our Commitment to Researchers

  • Trust. We maintain trust and confidentiality in our professional exchanges with security researchers.
  • Respect. We treat all researchers with respect and recognise your contribution to keeping our customers safe and secure.
  • Transparency. We will work with you to validate and remediate reported vulnerabilities in accordance with our commitment to security and privacy.
  • Common Good. We investigate and remediate issues in a manner consistent with protecting the safety and security of those potentially affected by a reported vulnerability.

What We Ask of Researchers

  • Trust. We request that you communicate about potential vulnerabilities in a responsible and secure manner, providing sufficient time and information for our team to validate and address potential issues.
  • Responsibility. Please ensure that no system is left in a more vulnerable state than when it was found. Do not degrade the user experience, disrupt production systems, or destroy or manipulate any data.
  • Respect. Please refrain from any action that might be considered a privacy violation, cause the destruction of data, or interrupt or degrade our service.
  • Legal Compliance. Please notify us as soon as possible after you discover a real or potential security issue, and do not access, view, or download any personal information. We request that you do not violate any applicable laws, which may include but are not limited to applicable privacy law.
  • Transparency. We request that researchers provide sufficient technical details and supporting information to enable our team to identify, reproduce, and validate reported issues using the reporting form below.
  • Common Good. We request that researchers act for the common good, protecting user privacy and security by refraining from publicly disclosing unverified vulnerabilities until our team has had time to validate and address reported issues.

Vulnerability Reporting

Tunstall Ireland recommends that security researchers share the details of any suspected vulnerabilities across any asset owned, controlled, or operated by Tunstall Ireland, or that would reasonably impact the security of Tunstall Ireland and our users, using the web form below. The Tunstall Ireland Security team will acknowledge receipt of each vulnerability.

The Company commits not to initiate or support any legal action against Security Researchers who discover and report vulnerabilities in good faith, provided their activities comply with this Coordinated Vulnerability Disclosure Policy.

Submission form

All fields are required unless marked optional.


Request a Callback

Please fill in the details and we will call you as soon as we can.