Onna Technologies, Inc.

Vulnerability Disclosure Policy

Security is a top priority for Onna because it’s fundamental to everything we do, our customers and our product. For this reason, we have implemented a number of security measures and we’re committed to securing application data, eliminating vulnerabilities and ensuring business continuity.

Initial Scope

Onna’s Vulnerability Disclosure Program covers the following products:

• account functionality on https://enterprise.onna.com

We ask that vulnerability reports pertain only to the stated product list.

If information believed to be related to a vulnerability in a Onna product or service is found, then Onna would welcome this information to help mitigate a security vulnerability or to improve our security posture. We will investigate the information and take action when appropriate.

We request that you not post or share information about a potential and unverified vulnerability in any public setting until we have researched, responded to, and addressed the reported vulnerability and informed customers if needed.