Security and Vulnerability Disclosure
If you believe you have found a security vulnerability in WTIC or in systems operated by Energy Substantiation Partners, LLC (“EnSub”), please tell us privately so we can fix it before it can be exploited.
How to report
Email [email protected]. Please include what is affected, the steps to reproduce the issue, and the impact you believe it has. A minimal proof of concept helps us confirm the report quickly.
What to expect
- We will acknowledge your report within two business days.
- We will keep you informed as we investigate and fix the issue.
- We will coordinate with you on the timing of any public disclosure once a fix is in place.
We do not currently run a paid bug bounty program.
Testing in good faith
Please do not access, modify, or delete data that is not yours, do not move or freeze funds, and do not exploit an issue beyond what is needed to demonstrate it. Give us a reasonable amount of time to fix an issue before you disclose it publicly.