SECURITY
Last updated: 2026/11/06
We build SONUS AI, SONUS Manage and SONUS CTRL, which handle personal and health data for hearing-care stores. We welcome security researchers telling us about weaknesses in our systems, and we commit to handling reports seriously and quickly.
How to report
Email security@seersonus.com and include, where you can:
- The affected URL or product (SONUS AI, SONUS Manage or SONUS CTRL)
- Steps to reproduce, the impact, and when you observed it
- How you would like to be credited, or that you prefer to stay anonymous
Please do not attach real customer data. A screenshot showing that access is possible is enough, and please delete any data you obtained.
What we commit to
- Acknowledge your report within 5 working days and share our initial assessment.
- Keep you updated while we fix it.
- Target: critical issues fixed in production within 72 hours, high-severity issues within 14 days.
- Agree a disclosure date with you once fixed; by default you may publish after 90 days.
- With your permission, credit you by name.
We value good-faith security research. Researchers who report under this policy and follow the rules below are, to us, partners in protecting our customers' data.
Please
- Test only as far as needed to show the issue exists; do not access, change or delete other people's data, or download more than needed as proof.
- No denial of service, spam, social engineering (phishing, impersonating staff or stores) or physical intrusion.
- Do not disrupt stores' normal business.
- If you encounter personal data, stop and tell us.
Scope
- In scope: SONUS AI, SONUS Manage and SONUS CTRL on *.seersonus.com, and the store tablet app.
- Out of scope: third-party services themselves (e.g. Cloudflare, Google, LINE — please report to them directly) and typos in marketing content.
Rewards
We do not currently run a bug bounty.
Machine-readable contact: /.well-known/security.txt