Responsible Vulnerability Disclosure

Reporting a vulnerability

If you discover a security vulnerability on any Trustoryx SEO property, please report it responsibly to nikhil@trustoryx.digital.

Guidelines

• Provide detailed information about the vulnerability, including steps to reproduce.
• Do not exploit the vulnerability or access data that is not yours.
• Do not publish or publicly disclose the vulnerability before we have had an opportunity to investigate and resolve it.
• Allow reasonable time for investigation and remediation before any public disclosure.

Our commitment

• We acknowledge legitimate vulnerability reports promptly.
• We investigate and work to resolve verified vulnerabilities in a timely manner.
• We do not pursue legal action against reporters who follow these guidelines.
• We do not publish internal architecture secrets.

What not to report

• Security scanners reports without verified findings.
• Vulnerabilities in third-party services we do not control.
• Social engineering or phishing attempts.