Responsible Vulnerability Disclosure Policy

At Manley Solutions, security is a top priority. We are committed to protecting the integrity, confidentiality, and availability of our services — including Red Tag Lines (RTL) and all POTS replacement solutions — for our customers, partners, and users.

We recognize that security researchers and the broader community play an important role in identifying vulnerabilities. We encourage responsible reporting of any potential security issues you discover, and we are committed to investigating and remediating them as quickly as possible.

If you believe you have found a security vulnerability in any Manley Solutions product, service, or system, please contact us immediately by emailing:
security@manleysolutions.com

Include as much detail as possible to help us investigate:

• A clear description of the vulnerability
   
• Steps to reproduce the issue
   
• Any potential impact you have identified
   
• Your contact information (optional, if you wish to receive acknowledgment or updates)
   

• We will acknowledge receipt of your report within 5 business days.
   
• We will investigate and validate the reported issue promptly.
   
• If remediation is required, we will prioritize deployment of a fix and notify you upon resolution.
   
• If you wish, we will publicly credit you for the discovery once the issue is resolved (unless you prefer to remain anonymous).
   

We request that you:

• Do not exploit the vulnerability beyond the extent necessary to demonstrate its existence.
   
• Do not access, modify, or delete data that does not belong to you.
   
• Do not compromise the availability of our services (e.g., through denial-of-service attacks).
   
• Comply with all applicable laws during your testing and reporting activities.
   

We will not pursue legal action against individuals who:

• Engage in security research and vulnerability reporting in good faith; and
   
• Comply with this policy and its guidelines.