Vargas-London maintains this security policy and welcomes responsible reports from researchers, journalists, and members of the public. This page describes how to reach us and what to expect.
Report a security issue
If you discover a vulnerability in this website, our email infrastructure, or our online systems, please report it to:
- Email: carlos.vargas@mydallasfuneralhome.com
- Phone (urgent only): (214) 550-7369
Please include:
- A description of the issue
- Steps to reproduce
- The potential impact as you understand it
- Any supporting screenshots or proof-of-concept code
- Your name or handle if you wish to be credited
Our commitments
- We will acknowledge your report within three business days.
- We will investigate and respond with a plan within ten business days.
- We will keep you informed through remediation.
- We will not pursue legal action against good-faith researchers who follow this policy.
- With your permission, we will credit you publicly on this page once the issue is resolved.
Scope
This policy covers:
mydallasfuneralhome.comandwww.mydallasfuneralhome.com- Any subdomains under our control
- Our email infrastructure sending from
@mydallasfuneralhome.com
Out of scope:
- Third-party platforms we don't control (payment processors, hosted forms, analytics providers)
- Social engineering of our staff (please don't)
- Physical security of our facility
- Issues requiring physical access to our network
Guidelines for researchers
- Report promptly and privately. Do not disclose publicly until we have had a reasonable chance to fix the issue.
- Avoid disrupting service or accessing families' personal information.
- Do not test on or through the 24/7 care-team phone line.
- Use minimal necessary information to demonstrate the vulnerability.
Acknowledgments
Researchers who report issues responsibly and request credit will be listed here.