ATTPL HoldCo SECURITY VULNERABILITY DISCLOSURE POLICY

ATTPL HoldCo SECURITY VULNERABILITY DISCLOSURE POLICY

HOME•ATTPL HoldCo SECURITY VULNERABILITY DISCLOSURE POLICY

D ATTPL HoldCo

SECURITY VULNERABILITY DISCLOSURE POLICY

Effective Date: 27/08/2025

Last Updated: 16/06/2026

1. PURPOSE

ATTPL HoldCo encourages responsible security research and welcomes the responsible reporting of security vulnerabilities.

2. SCOPE

Websites
Mobile Apps
APIs
SaaS Platforms
AI Systems
Cloud Infrastructure
Future Microservices

3. AUTHORIZED SECURITY RESEARCH

Security Researchers
Vulnerability Discovery
Responsible Disclosure
Security Validation

4. PROHIBITED ACTIVITIES

Data Theft
Service Disruption
Denial of Service Attacks
Social Engineering
Physical Security Attacks
Unauthorized Access

5. DISCLOSURE PROCESS

Vulnerability Description
Impact Assessment
Reproduction Steps
Supporting Evidence

6. RESPONSE COMMITMENT

Company shall:

Acknowledge Reports
Investigate Findings
Remediate Confirmed Issues
Maintain Confidentiality

7. CONTACT

security@attplgroup.com

COMMITMENT

Security is a shared responsibility.