Vulnerability Disclosure & Security Policy
Guidelines for independent cybersecurity researchers and ethical hackers to identify and report potential security vulnerabilities to Mulun Tech safely and responsibly.
Notice: This policy document is adopted as the operational Version One baseline for Mulun Technologies Co. Ltd. Ongoing review is conducted by appointed corporate legal counsel in Kampala, Uganda.
1. Security Commitment
Mulun Tech prioritizes the security, confidentiality, and integrity of our systems and client data. We welcome responsible disclosures from ethical security researchers.
2. Safe Harbor Principles
If you conduct vulnerability research in good faith and adhere strictly to these guidelines, we will not pursue legal action, report your activity to law enforcement, or initiate civil claims against you.
3. Prohibited Activities
Researchers must NOT: Execute denial-of-service (DoS/DDoS) attacks, access or alter client data, perform physical intrusions into company premises, conduct social engineering or phishing against employees, or publicly disclose a vulnerability before Mulun has validated and deployed a patch.
4. Submission Protocol
Please report suspected vulnerabilities immediately to security@mulun.tech with detailed reproducible steps, environment details, and proof-of-concept snippets. We acknowledge receipt within twenty-four (24) business hours.
To exercise your statutory data subject rights (access, rectification, erasure, or objection) under the Uganda Data Protection and Privacy Act 2019, contact our DPO:
Email: privacy@mulun.tech
Address: Mulun Technologies Co. Ltd, Kampala, Uganda