Coordinated Vulnerability Disclosure Process

We value the contributions of the security research community. If you believe you have identified a potential security vulnerability in one of our products, we want to know so we can investigate.

Contact Information

To report a potential vulnerability, email CustomerCare@Modular-Medical.com. We would prefer that your message be provided in English.

Information to Provide

• Your contact information, including name(s), organization name, email address and phone number so we can follow up with you.
• Your preferred method for further contact, such that we can establish a secure means of communication.
• Technical description of the concern or vulnerability, including:
  
  • A detailed walkthrough of how the vulnerability was encountered and detected.
  • Which products are impacted
  • Any additional information you think will be helpful to us, including details on the testing environment and tools used to conduct the testing
• Whether you have notified anyone else about the potential vulnerability, such as regulatory agencies, vendors, or vulnerability coordinators.
• Please do not include any personally identifiable information about others in your email submission.

How Modular Medical Will Respond

Within 3 business days, Modular Medical will confirm we have received your submission. We may want to follow up with you to better understand what you’ve found, or to confirm technical details.

We will investigate the potential vulnerability and conduct a risk analysis to determine appropriate action.

Important Information

We ask that you comply with all laws and regulations when conducting your research, and avoid actions that could harm products or people, such as brute force testing, tests on active devices, tests on software in production settings, actions taken to exploit any vulnerability, and actions that result in a change to a product or system after the test is conducted.

By submitting information you agree that your submission will be governed by Modular Medical's Privacy Policy and Terms and Conditions. Modular Medical may also, at our discretion, distribute or issue advisories to Information Sharing and Analysis Organizations (ISAOs) and other information sharing communities, or publish such advisories on this and other defined websites. On request, the finder of the issue will be acknowledged in such advisories.

We reserve the right to change any aspect of our coordinated disclosure process at any time without notice, and to make exceptions to it on a case by case basis.