Responsible Disclosure Policy
Last updated: 16 October 2026. This policy does not authorise unauthorised testing.
Scope and reporting channel
This provides a proposed reporting route for suspected vulnerabilities affecting www.kachexmodel.com. It does not authorise access to systems you do not own or have permission to test, including third-party hosting and services. Email info@kachexmodel.com with the subject “Responsible Security Disclosure”.
Information to include
Describe the suspected issue, affected page or service, potential impact and steps sufficient to reproduce it without causing harm. Include relevant supporting evidence only where it can be shared without exposing personal data, secrets or confidential information. Do not attach unnecessary datasets or credentials.
Responsible conduct
Do not access, alter, download or disclose other people’s data, install malware, disrupt services, perform denial-of-service testing; bypass access restrictions, or maintain unauthorised access. Do not exploit a suspected issue beyond what is reasonably necessary to demonstrate it within existing authorisation. Stop and report once sufficient evidence is obtained.
Handling and coordinated disclosure
The proposed process is to make reasonable efforts to acknowledge and assess reports and ask for clarification where needed. Management must approve report ownership and escalation before this policy becomes effective. Assessment and remediation depend on severity, reproducibility and operational impact; no fixed response deadline is promised. Agree any public disclosure with the company in advance.
No reward or testing authorisation
Submitting a report does not guarantee payment, public recognition, legal immunity or permission for further testing. The final policy and any safe-harbour wording require Nigerian legal and operational review. Contact: Kachex Model Technologies Limited, info@kachexmodel.com, +234 906 520 1149.