Security & Vulnerability Disclosure

Report a concern responsibly.

Use this route to report a potential security concern affecting the public TIRAV website.

POLICY / 2026

Current website policy

Last updated October 24, 2026.

How to report

Email support@tirav.com with the subject "Security Report." Include the affected public URL, a concise description, reproduction steps and your contact information. Do not include credentials, customer data or sensitive proof in the first message.

Good-faith boundaries

Do not access, alter, retain or disclose data that is not yours. Do not disrupt services, use social engineering, conduct denial-of-service testing, scan unrelated systems or test third-party services without authorization.

What happens next

TIRAV will route the report for review, assess the reported scope and risk, and may request additional information. Response and remediation timing depend on the nature and complexity of the issue. TIRAV does not currently operate a bug-bounty or contractual safe-harbour program through this page.

Scope

This policy covers the public corporate website only. Before testing Orbitlink, TIRAV Managed IT, development systems or third-party services, request and receive separate written authorization.

Policy updates

TIRAV may update this disclosure policy as its reporting route, internal triage process or public website scope changes. The revision date above identifies the current published version.