Vulnerability Disclosure

Vulnerability Disclosure

Effective Date: 07/02/2026

Sequoyah Electric takes the security of our systems seriously. If you believe you have found a security vulnerability in any Sequoyah Electric website, application, or internet-facing system, we want to hear from you.

How to Report

Email security@sequoyah.com with:

• A description of the issue and where you found it (URL, IP address, or service).
• Steps to reproduce it.
• Any supporting screenshots or proof of concept.
• How we can reach you for follow-up.

What We Commit To

• We will acknowledge your report within five business days.
• We will investigate and keep you informed of our progress.
• We will not pursue legal action against researchers who act in good faith: report promptly, avoid privacy violations and service disruption, do not access or modify data beyond what is needed to demonstrate the issue, and do not publicly disclose the issue before we have addressed it.

Out of Scope

• Denial-of-service testing.
• Social engineering or phishing of Sequoyah Electric employees.
• Physical attacks against Sequoyah Electric offices or job sites.

We do not currently operate a paid bug bounty program.