Responsible Disclosure Policy
We appreciate the work of security researchers and the community in helping keep our systems safe.
If you believe you have found a security vulnerability in a Trazup product, service, or website, please report it to us responsibly.
How to report
Please send a report via our Contact page with as much detail as possible, including steps to reproduce, impact assessment, and any relevant logs or screenshots.
What to include
Include the affected product or URL, reproduction steps, proof-of-concept (if available), and a suggested mitigation if you have one.
Safe harbor
We will not pursue legal action against researchers who act in good faith, avoid privacy violations, avoid service disruption, and give us a reasonable opportunity to remediate prior to public disclosure.
Disclosure timeline
We aim to acknowledge reports promptly and work with you on a remediation timeline based on severity and complexity.