SECURITY
Vulnerability disclosure
Tengaikoko LLC · Grand Ledge, MI · Last updated 22 October 2026
If you believe you have found a security weakness in tengaikoko.com, email Martin.d@Tengaikoko.com. That mailbox is the disclosure contact. Please do not send vulnerability reports through WhatsApp or a public page.
What to include
- The page or request where you saw the issue.
- What you did, and what happened.
- The effect, if you can tell (for example, data you should not have seen).
What we ask
- Give us a chance to fix the issue before you publish it.
- Do not access, change, or delete another customer's data.
- Do not degrade the site, send spam, or run a denial-of-service test.
- Do not run social-engineering or physical attacks against staff or customers.
Research done in good faith, within those limits, will not be the basis of a legal claim by Tengaikoko LLC. We do not run a paid bounty program.
This covers tengaikoko.com. Payment pages operated by Stripe, PayPal, or Paynow, and other companies' sites, are outside this policy. Report those to the company that runs them.
The machine-readable file is /.well-known/security.txt.