Vulnerability Disclosure

Reporting a Vulnerability

TRUSTTICA welcomes reports from good-faith security researchers who believe they have found a vulnerability affecting the Services. Please send reports to support@trusttica.com with the subject line "Security Vulnerability Report."

What to Include

• affected URL/component
• reproduction steps
• impact
• supporting evidence (e.g. screenshots, request/response logs)
• your contact information

Ground Rules

The following are prohibited when researching or reporting a vulnerability:

• destructive testing
• privacy violations
• social engineering
• data exfiltration

Please give TRUSTTICA a reasonable opportunity to investigate and remediate before any public disclosure.

Recognition

TRUSTTICA does not currently operate a paid bug-bounty program. Good-faith reports that lead to a confirmed fix may be acknowledged at TRUSTTICA's discretion.