Security and Vulnerability Disclosure

1. How to report

Email security@ridgewill.com. Include:

• what you found, and where (the address, app and version);
• the steps to reproduce it, and a proof of concept if you have one;
• what someone could do with it;
• how to contact you, and whether you want to be credited.

Please do not report security problems through the support form or in an app review, where other people may see them.

2. What you may test

• ridgewill.com and every address ending in .ridgewill.com, including the account, sign-in, admin and support services.
• The Ridgewill apps, including Keyodo, in the versions published on the App Store and Google Play.

Test only with accounts you created yourself, or with the permission of the account holder.

3. What is out of scope

• Denial-of-service attacks, or anything that degrades the Services for other people.
• Social engineering, phishing, or physical attacks on people or places.
• Services run by other companies that we use, such as our hosting, email or app store providers. Report those to the company that runs them.
• Reports from automated scanners without a working proof of a real problem.
• Missing best-practice settings with no demonstrated way to cause harm.

4. Rules for research

• Do not access, change or delete other people's data. If you reach someone else's information, stop, do not keep a copy, and tell us.
• Use only what you need to prove the problem.
• Do not disrupt the Services or degrade them for anyone else.
• Keep the problem confidential until we have fixed it, or until 90 days after your report, whichever comes first. If we need more time, we will tell you why and agree a date with you.

5. Safe harbor

If you follow this policy in good faith, we consider your research authorized. We will not take legal action against you or report you to law enforcement for it, and if someone else does, we will make it known that your research was authorized. This does not cover research on other companies' services, and we cannot authorize that.

6. What we do

• We acknowledge your report within 3 business days.
• We keep you updated while we investigate and fix the problem, and tell you when it is fixed.
• If you want, we credit you by name once it is fixed.
• We do not pay rewards for reports.

7. Contact

security@ridgewill.com

Ridgewill LLC
4049 US Highway 231, PMB 1027
Wetumpka, AL 36093