Responsible Disclosure Policy

We appreciate the work of security researchers and the community in helping keep our systems safe.

If you believe you have found a security vulnerability in a Trazup product, service, or website, please report it to us responsibly.

How to report

Please send a report via our Contact page with as much detail as possible, including steps to reproduce, impact assessment, and any relevant logs or screenshots.

What to include

Include the affected product or URL, reproduction steps, proof-of-concept (if available), and a suggested mitigation if you have one.

Safe harbor

We will not pursue legal action against researchers who act in good faith, avoid privacy violations, avoid service disruption, and give us a reasonable opportunity to remediate prior to public disclosure.

Disclosure timeline

We aim to acknowledge reports promptly and work with you on a remediation timeline based on severity and complexity.