1. Policy Statement
[Guangzhou Felicity Solar Technology Co., Ltd.] is committed to maintaining the security and integrity of its products and services. We welcome responsible security research and encourage security researchers to report potential vulnerabilities to us in a coordinated and disclosure-compliant manner. This policy outlines the guidelines for reporting, handling, and disclosing security vulnerabilities.
2. Scope
This policy applies to all products, software, firmware, hardware devices, and online services provided by [Guangzhou Felicity Solar Technology Co., Ltd.].
3. Reporting Requirements
To report a vulnerability, please send an email to: [email protected] include:
- Detailed description of the vulnerability
- Step-by-step reproduction steps
- Potential impact and risk level
- Proof-of-concept (PoC) if available
- Your contact information for follow-up
4. Acknowledgment & Response Time
- We will acknowledge receipt of your report within 72 business hours.
- We will keep you informed of the status throughout the remediation process.
5. Vulnerability Handling Timeline
The typical remediation timeline (assessment + fix + verification) is 30–60 days. If a longer timeline is needed, we will notify you in advance.
6. Responsible Disclosure
We request that you:
- Refrain from publicly disclosing the vulnerability until we have completed remediation.
- Avoid any malicious, destructive, or invasive activities.
- Respect user privacy and do not access sensitive data unnecessarily.
7. Credit & Recognition
After successful remediation, we will publicly acknowledge your responsible disclosure in our security advisory or release notes, unless you request anonymity.
8. Supported Products Cycle
[Guangzhou Felicity Solar Technology Co., Ltd.] provides security updates and technical support for [3] years from the product’s general availability date.
9. Contact Information
- Security Team: [email protected]
- Support Team:[email protected]
- Official Website:felicitysolar.com
10. Effective Date
This policy is effective as of [2026/3/12].
