Vulnerability Disclosure Policy
Effective Date: September 15, 2026
SITERWELL takes the security of its websites, connected products, software, and customer information seriously. If you believe you have discovered a security vulnerability affecting a SITERWELL system or product, please report it responsibly.
1. What to Include
Where possible, provide the affected product, model, website, service, application, or software version; a description of the vulnerability; steps needed to reproduce the issue; the potential security impact; relevant screenshots or supporting information; and contact information if you would like us to communicate with you regarding the report.
2. Responsible Research Expectations
Security research should be non-destructive. Do not access data belonging to another person beyond what is minimally necessary to identify a vulnerability; download or retain customer information; modify or delete data; disrupt services; perform denial-of-service attacks; use social engineering; attempt physical attacks; install persistent access mechanisms; extort or threaten SITERWELL or its customers; or publicly disclose sensitive vulnerability details before SITERWELL has had a reasonable opportunity to investigate and address the issue.
If you unexpectedly encounter personal or confidential information, stop testing and report the issue.
3. Reporting
Security reports may be submitted to service@siterwellhome.com.
Please use the subject: Security Vulnerability Report.
4. No Guaranteed Reward
Unless a separate written bug-bounty program expressly states otherwise, submission of a vulnerability report does not create an entitlement to payment, compensation, employment, or another reward.
5. Good-Faith Reports
SITERWELL intends to review good-faith reports submitted in accordance with this policy. This policy does not authorize activity that is unlawful or violates the rights of third parties.
6. Privacy
Information submitted as part of a vulnerability report will be handled in accordance with our Privacy Policy.