Affected public surface
Provide the exact public URL or component and the date/time of the observation.
Responsible Security Disclosure
Report clearly. Minimise sensitive data. Stay within your authority.
TVK Aerospace & Defence accepts written reports about security issues affecting its public corporate surfaces. This page provides a reporting route; it does not grant permission to access systems, bypass controls or test beyond applicable law and explicit written authorization.
Reporting
What to include.
Reproduction
Use concise, non-destructive steps and explain the observed impact. Do not expand testing beyond what you are already authorized to do.
Minimum evidence
Include only evidence required to understand the issue. Redact credentials, session secrets, private keys and unrelated personal or restricted data.
Data minimisation
Do not send secrets by ordinary email.
Do not send passwords, authentication tokens, private keys, recovery material, classified information, restricted operational data or unnecessary personal data.
If sensitive evidence is genuinely required to evaluate a report, first request an agreed secure exchange route through the written contact channel.
Authority boundary
A disclosure policy is not a testing licence.
No access grant
This page does not authorize access to accounts, private systems, producer infrastructure or third-party assets.
No disruptive testing
It does not authorize bypassing controls, denial-of-service, destructive activity, social engineering, data exfiltration or availability disruption.
No command implication
A reported issue does not change the portfolio boundary: situational awareness and evidence functions remain separate from weapon, flight-control or spacecraft-actuation authority.
Written security contact
team@tvklabs.com
Use the subject Security report — TVK Aerospace. Reports are evaluated within the scope of the affected TVK-controlled public surface and the reporter's existing lawful authority.
No safe-harbor, testing-authorization, operational-certification, command or actuation claim is created by this page.