Vulnerability disclosure policy
… information, including financial and personal information, from unwarranted disclosure. However, as an agency with … listed above, such as any connected services, are excluded from scope and are not authorized for testing. Vulnerabilities found in non-federal systems from our vendors fall outside of this policy’s scope and …