{"id":275,"date":"2026-09-09T19:09:24","date_gmt":"2026-09-09T23:09:24","guid":{"rendered":"https:\/\/restartingtheheart.com\/vulnerability-disclosure\/"},"modified":"2026-09-09T20:43:34","modified_gmt":"2026-09-10T00:43:34","slug":"vulnerability-disclosure","status":"publish","type":"page","link":"https:\/\/restartingtheheart.com\/vulnerability-disclosure\/","title":{"rendered":"Vulnerability Disclosure Policy"},"content":{"rendered":"

Effective:<\/strong> September 9, 2026  \u00b7  Last reviewed:<\/strong> September 9, 2026  \u00b7  Architecture:<\/strong> RTH Governance 2.0<\/p>\n

Status:<\/strong> Current governance standard for applicable RTH public operations. Product-specific controls apply when the relevant product or program is enabled.<\/p>\n

1. Reporting channel<\/h2>\n

RTH welcomes good-faith reports of suspected security vulnerabilities at security@restartingtheheart.com<\/a>. Include the affected URL or asset, a clear description, reproducible steps where safely available, potential impact, and a way to contact you.<\/p>\n

2. No open testing authorization yet<\/h2>\n

RTH does not currently operate an open penetration-testing or bug-bounty program. Publishing this reporting channel does not authorize access to accounts or data, credential attacks, denial of service, social engineering, physical testing, persistence, destructive activity, privacy invasion, or testing against third-party infrastructure.<\/p>\n

3. Good-faith handling<\/h2>\n

If you encounter a suspected vulnerability without intentionally exceeding authorized access, stop when you can demonstrate the issue, avoid collecting or retaining personal information, do not publicly disclose sensitive details while remediation is underway, and report the issue promptly. RTH will evaluate reports based on the facts and applicable law.<\/p>\n

4. Sensitive information<\/h2>\n

Do not include passwords, private keys, authentication tokens, medical records, child information, or unrelated personal data in a report. If evidence necessarily contains sensitive data, first request a secure transfer method.<\/p>\n

5. Triage and communication<\/h2>\n

RTH will prioritize reports according to exploitability, affected data, privilege required, user impact, scope, and operational risk. RTH aims to acknowledge actionable reports promptly, may request additional details, and may coordinate a disclosure timeline when warranted. Response time can vary by severity and available resources.<\/p>\n

6. Bounties<\/h2>\n

No payment or bounty is promised unless RTH separately publishes a written bounty program covering the reported system and activity.<\/p>\n

7. Future coordinated disclosure program<\/h2>\n

If RTH later authorizes a broader security-research program, the in-scope assets, safe-harbor language, permitted techniques, exclusions, and disclosure expectations will be published explicitly. Researchers should rely on that published scope rather than infer authorization from this page.<\/p>\n

Security reports:<\/strong> security@restartingtheheart.com<\/a>. See the Vulnerability Disclosure Policy<\/a> before performing security testing.<\/p>\n

General questions may use the RTH contact page<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Effective: September 9, 2026  \u00b7  Last reviewed: September 9, 2026  \u00b7  Architecture: RTH Governance 2.0 Status: Current governance standard for applicable RTH public operations. Product-specific controls apply when the relevant product or program is enabled. 1. Reporting channel RTH welcomes good-faith reports of suspected security vulnerabilities at security@restartingtheheart.com. Include the affected URL or asset, a […]<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-275","page","type-page","status-publish","hentry"],"yoast_head":"\nVulnerability Disclosure Policy - Restarting The Heart<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/restartingtheheart.com\/vulnerability-disclosure\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerability Disclosure Policy - Restarting The Heart\" \/>\n<meta property=\"og:description\" content=\"Effective: September 9, 2026  \u00b7  Last reviewed: September 9, 2026  \u00b7  Architecture: RTH Governance 2.0 Status: Current governance standard for applicable RTH public operations. Product-specific controls apply when the relevant product or program is enabled. 1. Reporting channel RTH welcomes good-faith reports of suspected security vulnerabilities at security@restartingtheheart.com. Include the affected URL or asset, a […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/restartingtheheart.com\/vulnerability-disclosure\/\" \/>\n<meta property=\"og:site_name\" content=\"Restarting The Heart\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-10T00:43:34+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/restartingtheheart.com\\\/vulnerability-disclosure\\\/\",\"url\":\"https:\\\/\\\/restartingtheheart.com\\\/vulnerability-disclosure\\\/\",\"name\":\"Vulnerability Disclosure Policy - Restarting The Heart\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/restartingtheheart.com\\\/#website\"},\"datePublished\":\"2026-09-09T23:09:24+00:00\",\"dateModified\":\"2026-09-10T00:43:34+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/restartingtheheart.com\\\/vulnerability-disclosure\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/restartingtheheart.com\\\/vulnerability-disclosure\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/restartingtheheart.com\\\/vulnerability-disclosure\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/restartingtheheart.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerability Disclosure Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/restartingtheheart.com\\\/#website\",\"url\":\"https:\\\/\\\/restartingtheheart.com\\\/\",\"name\":\"Restarting The Heart\",\"description\":\"Survivor-centered education, publishing, community impact, research, and responsible technology development.\",\"publisher\":{\"@id\":\"https:\\\/\\\/restartingtheheart.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/restartingtheheart.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/restartingtheheart.com\\\/#organization\",\"name\":\"Restarting The Heart\",\"url\":\"https:\\\/\\\/restartingtheheart.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/restartingtheheart.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/restartingtheheart.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/RTH_LLC_Logo.png\",\"contentUrl\":\"https:\\\/\\\/restartingtheheart.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/RTH_LLC_Logo.png\",\"width\":1254,\"height\":1254,\"caption\":\"Restarting The Heart\"},\"image\":{\"@id\":\"https:\\\/\\\/restartingtheheart.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.instagram.com\\\/restartingtheheart\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vulnerability Disclosure Policy - Restarting The Heart","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/restartingtheheart.com\/vulnerability-disclosure\/","og_locale":"en_US","og_type":"article","og_title":"Vulnerability Disclosure Policy - Restarting The Heart","og_description":"Effective: September 9, 2026  \u00b7  Last reviewed: September 9, 2026  \u00b7  Architecture: RTH Governance 2.0 Status: Current governance standard for applicable RTH public operations. Product-specific controls apply when the relevant product or program is enabled. 1. Reporting channel RTH welcomes good-faith reports of suspected security vulnerabilities at security@restartingtheheart.com. Include the affected URL or asset, a […]","og_url":"https:\/\/restartingtheheart.com\/vulnerability-disclosure\/","og_site_name":"Restarting The Heart","article_modified_time":"2026-09-10T00:43:34+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/restartingtheheart.com\/vulnerability-disclosure\/","url":"https:\/\/restartingtheheart.com\/vulnerability-disclosure\/","name":"Vulnerability Disclosure Policy - Restarting The Heart","isPartOf":{"@id":"https:\/\/restartingtheheart.com\/#website"},"datePublished":"2026-09-09T23:09:24+00:00","dateModified":"2026-09-10T00:43:34+00:00","breadcrumb":{"@id":"https:\/\/restartingtheheart.com\/vulnerability-disclosure\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/restartingtheheart.com\/vulnerability-disclosure\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/restartingtheheart.com\/vulnerability-disclosure\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/restartingtheheart.com\/"},{"@type":"ListItem","position":2,"name":"Vulnerability Disclosure Policy"}]},{"@type":"WebSite","@id":"https:\/\/restartingtheheart.com\/#website","url":"https:\/\/restartingtheheart.com\/","name":"Restarting The Heart","description":"Survivor-centered education, publishing, community impact, research, and responsible technology development.","publisher":{"@id":"https:\/\/restartingtheheart.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/restartingtheheart.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/restartingtheheart.com\/#organization","name":"Restarting The Heart","url":"https:\/\/restartingtheheart.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/restartingtheheart.com\/#\/schema\/logo\/image\/","url":"https:\/\/restartingtheheart.com\/wp-content\/uploads\/2026\/09\/RTH_LLC_Logo.png","contentUrl":"https:\/\/restartingtheheart.com\/wp-content\/uploads\/2026\/09\/RTH_LLC_Logo.png","width":1254,"height":1254,"caption":"Restarting The Heart"},"image":{"@id":"https:\/\/restartingtheheart.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.instagram.com\/restartingtheheart\/"]}]}},"jetpack_likes_enabled":false,"jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/restartingtheheart.com\/wp-json\/wp\/v2\/pages\/275","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/restartingtheheart.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/restartingtheheart.com\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/restartingtheheart.com\/wp-json\/wp\/v2\/comments?post=275"}],"version-history":[{"count":4,"href":"https:\/\/restartingtheheart.com\/wp-json\/wp\/v2\/pages\/275\/revisions"}],"predecessor-version":[{"id":349,"href":"https:\/\/restartingtheheart.com\/wp-json\/wp\/v2\/pages\/275\/revisions\/349"}],"wp:attachment":[{"href":"https:\/\/restartingtheheart.com\/wp-json\/wp\/v2\/media?parent=275"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}