Report a security issue

Effective . Last updated .

If you find a security problem with this website or with email that claims to come from us, please tell us through our security contact form. Tualatin Federal Solutions reads every report, and the same contact is published in our security.txt file at /.well-known/security.txt.

What to include

  • The address of the affected page, or the email headers of the suspicious message
  • What you found and how to reproduce it
  • How to reach you if we have questions (optional)

What we do

  • We confirm that we received your report.
  • We investigate, fix confirmed problems and tell you when they are fixed.
  • We do not take legal action against good-faith reports that avoid harming users, data or service.

What not to do

Please do not access other people's data, run denial-of-service or automated attack tools, or send spam or phishing tests to our staff.

Email that claims to be from us

If a message that claims to come from us asks you to pay a new bank account or open an unexpected attachment, do not act on it. Check with us through this website, or call us at a number you already have, before you act.

Questions people ask

How do I check that an email really came from Tualatin Federal Solutions?

Compare it with what you asked us for. If a message asks you to change payment details or open an unexpected file, do not act on it. Confirm through our contact form or a number you already have, and forward anything suspicious to us through the security contact form.

Do you offer a bug bounty?

No. We are a small business and do not pay for reports. We do thank good-faith reporters, fix confirmed problems promptly, and do not take legal action against research that avoids harming users, data or service. Send what you find through our security contact form and we will keep you informed until it is fixed.

Related: privacy policy, accessibility statement and terms of sale.