Please contact us right away if you've found a security weakness on motorhometales.com.

All valid reports are taken seriously, and we'll work to fix any verified issues as soon as possible. Before submitting your report, please read through the following guidelines, which cover our core principles, bounty program requirements, and non-qualifying issues.

1. Core Principles

Motorhometales will not pursue legal action or an investigation against you if you submit vulnerability reports according to the guidelines below. We ask that you:

Allow Reasonable Time

Give us enough time to investigate the issue and fix it before you share the report publicly.

Respect User Privacy

Do not access or retrieve personal data from other users' accounts unless they've given you consent.

Act in Good Faith

Do not cause privacy violations, service interruptions, data destruction, or disruption to others.

Do Not Exploit the Vulnerability

Do not use or demonstrate the bug to access sensitive data or escalate risk.

Follow Applicable Laws

Do not perform any actions that go against applicable laws or regulations.

2. Bounty Program

We appreciate the efforts of ethical security researchers, and offer monetary rewards for valid and relevant vulnerability disclosures. Rewards are paid at our sole discretion, based on severity, potential risk, and other factors.

To qualify for a bounty, you must:

Comply With Our Core Principles

As outlined in Section 1.

Report a Valid Security Bug

The issue must pose a real security or privacy risk to our systems or users. Not all bugs qualify.

Submit Your Report Through Our Security Center

Please don't reach out to individual employees directly.

Report Responsibly

If you accidentally access data or cause a service disruption, report it immediately without attempting to explore further.

3. Non-Eligible Submissions

The following types of issues do not qualify for bounties and should not be submitted:

• Spam, social engineering, or phishing reports not related to our infrastructure
• Missing SPF/DMARC records
• Clickjacking on non-sensitive pages
• Rate-limiting or brute-force issues without clear impact
• Denial-of-Service (DoS) attacks
• Vulnerabilities requiring root or jailbroken devices
• Reports involving outdated browsers or extensions

4. How to Submit a Report

Email us at sales@motorhometales.com with as much detail as you can provide, including:

• Reproduction steps
• Potential impact
• Any relevant screenshots or code snippets