Last updated Jul 25 2026

Reporting Security Issues

Tesselmax Corporation takes the security of its products and services seriously. We welcome reports from security researchers, customers, and any member of the public acting in good faith.

How to Report

Email security@tesselmax.com. Please include:

• What you found and where: the product and version, or the website or service URL.
• Steps to reproduce the issue.
• Any assessment of impact you can offer.
• A way to reach you for follow-up questions (optional — anonymous reports are accepted).

If your report contains sensitive details you would prefer not to send in plain email, say so in a first message and we will arrange a secure channel.

What to Expect

• We will acknowledge your report within three (3) business days.
• We will investigate, keep you informed of our progress on request, and tell you when the issue is resolved.
• With your permission, we will credit you when we publish a fix or advisory. We are equally happy to keep your report anonymous.

We ask that you give us a reasonable opportunity to remediate an issue before disclosing it publicly.

Scope

• Tesselmax.EM software (all released versions).
• tesselmax.com and associated web services.
• Network services operated by Tesselmax (license, relay, and compute services).

Out of scope: third-party services we do not operate; social engineering of Tesselmax personnel; physical attacks; and testing that degrades service for others (including denial-of-service testing and high-volume automated scanning).

Good-Faith Research

We will not pursue or support legal action against researchers who, in good faith: access only the minimum data necessary to demonstrate an issue; do not access, modify, or destroy data belonging to others; stop and report immediately if personal data is encountered; and otherwise comply with applicable law.

This commitment is made by Tesselmax on its own behalf: it cannot bind third parties, and it does not authorize activity on systems we do not operate or exempt anyone from applicable law.

Rewards

We do not operate a paid bug-bounty program and do not offer monetary rewards. We do offer our thanks, and public credit if you want it.