Responsible Disclosure Policy

Report a security concern

Unified Recovery Co. welcomes reports of suspected security weaknesses in this consumer portal. Send a report to the contact below with the subject “Security vulnerability report.” For payment questions, account disputes or login assistance, use the ordinary contact form instead.

Email support@unifiedrecoveryco.com.

Call 1-877-765-0465.

Contact the office through the portal

What to include

Describe the affected page or feature, when you noticed the issue, its possible impact, and the minimum steps needed to reproduce it. Include your preferred reply address and any redacted screenshots that help explain the issue.

Do not send passwords, access tokens, full Social Security numbers, card or bank details, or another person's account information. If sensitive information is necessary to explain a report, describe the type of information and ask the office how to provide evidence securely.

Protect consumers and service availability

Limit any observations to public pages and accounts you are authorized to use. Do not access, download, change or delete another person's data; bypass account verification; make payments; send messages; or alter account records to demonstrate a concern. Do not use disruptive scanning, denial-of-service attacks, social engineering, credential attacks or malware.

If you unexpectedly encounter someone else's information, stop immediately, do not copy or share it, and report the location and circumstances without including the exposed data.

Scope and coordination

This policy covers reporting concerns about this Unified Recovery Co. portal. It does not grant permission to test third-party services, payment processors, messaging providers or other organizations. Obtain express written authorization before undertaking testing beyond normal, authorized use.

Please coordinate disclosure with the office and allow an opportunity to investigate and address the concern before publishing technical details. Never publish consumer information or credentials. Reports may require follow-up information; this policy does not promise a fixed response time, payment or reward.