Back
security@amps-technologies.com
Vulnerability Disclosure Policy

Security
at AMPS

We take security seriously. If you have found a vulnerability in our platform, we want to hear from you — and we commit to responding responsibly.

Found a vulnerability?

Please report it to us privately before disclosing publicly

Send a detailed report to security@amps-technologies.com. Please include a description of the issue, steps to reproduce, and the potential impact. We will acknowledge your report within 3 business days.

Report a Vulnerability

Our Response Commitment

3 days

Initial acknowledgement

7 days

Severity assessment and triage

30 days

Patch or mitigation deployed

Safe Harbor

AMPS Technologies will not pursue legal action against researchers who disclose vulnerabilities in good faith, provided they:

  • Do not access or modify data beyond what is needed to demonstrate the issue
  • Do not disclose publicly before we have addressed the vulnerability
  • Do not perform attacks that degrade or disrupt our service
  • Act in good faith and avoid privacy violations

Scope

In Scope

  • Authentication bypass or session hijacking
  • Cross-site scripting (XSS) or injection attacks
  • Insecure direct object references
  • Sensitive data exposure
  • Security misconfigurations

Out of Scope

  • Social engineering or phishing of our team
  • Physical attacks on infrastructure
  • Denial of service attacks

AMPS Technologies · Taytay, Rizal, Philippines