Report a Security Vulnerability

1. Reporting a Vulnerability

If you discover a potential security vulnerability, email security@mohnmatrix.com with reproduction details, affected URLs, and impact summary.

2. Scope Expectations

In-scope testing should avoid customer harm and service disruption.

• Do not access, modify, or exfiltrate customer data
• Do not perform denial-of-service or destructive tests
• Do not social-engineer staff or users

3. Safe Harbor

We will not pursue legal action for good-faith, non-disruptive research that follows this policy and is promptly reported to us for remediation.

4. Response Timeline

We target acknowledgment within 3 business days and status updates during investigation. Remediation timelines vary by severity and complexity.