Security & Responsible Disclosure Policy
Mulun Tech takes the security, confidentiality, and integrity of our digital infrastructure and client systems seriously. We welcome responsible disclosures from ethical security researchers.
Safe Harbor Commitment
If you conduct vulnerability research in good faith and adhere strictly to our responsible disclosure guidelines, Mulun Tech will not pursue civil lawsuits or report your activity to law enforcement agencies.
For our complete legal policy document, read our Responsible Disclosure Policy.What We Ask Researchers To Do
- ✓Report vulnerabilities promptly to security@mulun.tech.
- ✓Provide sufficient technical detail to reproduce the issue.
- ✓Allow reasonable time for remediation before disclosure.
Strictly Prohibited Activities
- ✕Do NOT execute Denial of Service (DoS / DDoS) attacks.
- ✕Do NOT access, modify, or exfiltrate client data records.
- ✕Do NOT execute social engineering or phishing against staff.
RFC 9116 Standard Security MetadataStandardized security contact and policy declaration available at /.well-known/security.txt
View security.txtRESPONSIBLE DISCLOSURE
Submit a Vulnerability Report
Our security incident response team acknowledges verified vulnerability disclosures within 24 business hours.
Direct encrypted security contact: security@mulun.tech.