Vulnerability Disclosure Policy

Table of Contents

Purpose

At TECO, we are committed to maintaining the security and integrity of our products, systems, and services, including smart televisions and Wi‑Fi enabled equipment and appliances.

This policy encourages the disclosure of potential security vulnerabilities by customers, partners and security researchers, and implements a clear procedure for reporting such vulnerabilities and providing a resolution in accordance with current legislative requirements and best security practices.

Scope

This policy applies to:

Reporting a Vulnerability

If you identify a potential cyber security vulnerability in any TECO product, system or
service, please report it as soon as possible via email to cyber.security@teco.com.au
or reporting form.

To assist us in investigating and addressing the report effectively, please provide the following details:

Product model number or system affected.
Description of the vulnerability issue.
Steps to reproduce the vulnerability.
Potential impact that it has had.
Proof of concept (e.g. screenshots, logs, code) as required.
Your contact email address.

Submit a report

Use our online form to send your report directly to the TECO cybersecurity team, or email us.

Information submitted under this policy will be used solely to investigate, mitigate, or remediate the reported issue. Your identity and contact details will be protected under Australian Privacy Laws and will not be shared without your express permission.

Providing detailed information helps us assess, investigate and remediate the issue more efficiently and quickly.

Our Commitment

When a vulnerability is reported, TECO will:

Acknowledge receipt within 7 business days and may request further information if required.
The response team will analyse the severity of the report and implement corrective actions to remediate the vulnerability issue in a timely manner.
Take necessary actions to reduce the consumer risks and mitigate measures needed to address the cyber security threats to the connected equipment.
The reporter will be kept informed through regular status updates and will be notified once the remediation process has been successfully completed.
Coordinate disclosure timing when necessary.

We are committed to responsible disclosure and close collaboration with the relevant
security authorities

Responsible Disclosure Guidelines

We ask that all reporters:

Act in good faith and avoid violations of Privacy or Cyber Security laws.
Do not access, modify, or delete data that does not belong to you.
Avoid actions that could disrupt services.
Do not publicly disclose the vulnerability until TECO Australia confirms that mitigation has been implemented, or gives written authorisation to disclose such matters.

These expectations are consistent with common responsible disclosure practices used across industry and government policies.

This policy does not authorise actions that violate any applicable legislation.

Statement of Compliance

Download Statements of Compliance documents for TECO Wi‑Fi connected appliances. Each document confirms that the listed product series meets the applicable security requirements for connected consumer products.

Policy Updates

This policy will be subject to regular review and may be updated to reflect changes in technology, legislative requirements, and best security practices.

Ready to report an issue?

Submit the details through our online reporting form or email cyber.security@teco.com.au.