Ethical Reporting Policy

Rwamashongye Wealth Management (“RWM,” “We,” “Our,” or “Us”) is dedicated to safeguarding the confidentiality, integrity, and availability of our information systems and applications. We prioritize cybersecurity and encourage anyone who identifies potential security issues to report them to us responsibly. Our Ethical Reporting Policy (“ERP”) provides a framework for security researchers to report any security concerns related to our information systems and applications.

RWM ERP Guidelines:

  • Please submit detailed reports that include reproducible steps. If the report lacks sufficient detail to replicate the issue, it may not be classified as triaged.

  • Please submit one vulnerability per report, unless chaining vulnerabilities is necessary to demonstrate their combined impact.

  • In cases of duplicate reports, only the first submission that can be fully reproduced will be triaged.

  • Multiple vulnerabilities stemming from a single underlying issue will be considered one valid report.

  • Social engineering tactics (e.g., phishing, vishing, smishing) are not allowed.

  • Do not access, copy, store, transfer, or download any proprietary or confidential data belonging to RWM.

  • Do not delete or modify user-generated data; impair, disrupt, or disable information systems and applications; or make data inaccessible.

  • Do not participate in any activity that violates applicable laws or regulations, including (a) federal or state laws or regulations, or (b) the laws or regulations of any country where (i) data, assets, or systems are located, (ii) data traffic is routed, or (iii) the researcher is conducting their research activities.

  • Failure to comply with RWM's terms and conditions will be regarded as unauthorized activity at RWM's sole discretion. RWM reserves all rights granted by law or equity in this matter.

Submit a security concern

If you believe you have discovered a potential security issue within the scope of MassMutual, please inform us as soon as possible by emailing a report of your findings using the button below:

Please include the following information in your report:

  • A description of the issue and its location.

  • A detailed account of the steps needed to reproduce the issue.

  • Publicly disclosing the issue outside of this reporting mechanism without RWM’s consent is strictly prohibited.