Trust & Security Center

TegmenSoft product security policies, responsible disclosure guidelines, and data processing standards.

Responsible Disclosure Policy

If you discover a security vulnerability in our platform or services, please report it to us. We prioritize and investigate all security findings.

Security Contact Channel

For direct vulnerability reporting and security inquiries:

contact@tegmensoft.com.trWe aim to acknowledge security notifications within one business day.RFC 9116 security.txt

Data Transport & Protection

All web traffic is encrypted via TLS (HTTPS). In the Web SBOM Scanner, raw file contents are never uploaded to the server.

Row-Level Tenant Isolation

In our enterprise platform architecture, tenant data is segregated using row-level tenant isolation.

Data Processing Notice

In the Web SBOM Scanner, your raw source code and manifest files are parsed locally in your browser. Only normalized package coordinates (name, version, ecosystem) are processed by our backend for OSV matching.