Security Policy

Hanley Tech is committed to protecting the security, integrity, and privacy of this website and the people who use it. This policy explains how we approach website security and how you can report a security concern to us.

Our Commitment

We work to provide a secure, reliable, and trustworthy digital experience. Technical operations for this website are provided by LAB Information Technology, Inc. (LABUSA) on behalf of Hanley Tech, and include ongoing security monitoring, maintenance, and updates.

How We Protect Information

Our security practices include measures such as:

  • Encryption of information in transit using HTTPS/TLS.
  • Security monitoring and logging.
  • Regular software maintenance and updates.
  • Access controls for administrative functions.
  • Regular backups.

Information you submit through this website is handled in accordance with our Privacy Policy.

Reporting a Security Issue (Responsible Disclosure)

We welcome reports from security researchers and members of the public who identify potential vulnerabilities. If you believe you have found a security issue, please contact us at security@hanleytech.com.

When conducting security research, we ask that you act in good faith:

  • Do not access, modify, or delete data that does not belong to you.
  • Do not degrade or disrupt our services, and do not perform denial-of-service testing.
  • Do not publicly disclose a vulnerability before we have had a reasonable opportunity to address it.
  • Give us a reasonable amount of time to respond and remediate.

If you make a good-faith effort to comply with this policy during your research, we will consider your testing authorized, work with you to understand and resolve the issue promptly, and will not pursue or support legal action against you.

What to Include in a Report

To help us investigate quickly, please include:

  • The address (URL) of the affected page.
  • A clear description of the issue and its potential impact.
  • Steps to reproduce the issue.
  • The date and time you observed it.

Scope

This policy applies to the websites and services operated on the hanleytech.com domain and its subdomains. The following are out of scope: third-party services and platforms we do not control, social-engineering attacks against staff or customers, and physical security testing.

Information We Do Not Disclose

For security reasons, detailed infrastructure configurations and internal security controls are not publicly disclosed.

Contact

Security concerns and vulnerability reports: security@hanleytech.com. A machine-readable version of our security contact information is available at /.well-known/security.txt.

For more about how this website is operated, see About This Website.