Trustvice is in restricted beta. At sign up or sign in, you have to provide the beta tester password you received or request one at preview@trustvice.com. Thank you.
Loading…
Security
Disclosure
Report a vulnerability.
Trustvice issues signed facts that people rely on, so we want to hear about anything that could break them. Report with your contact details or anonymously. A person on our security team reads every report.
Safe harborNo legal action for good-faith researchFollow the policy and we treat your research as authorised, and say so if anyone else objects.
Coordinated90 days to fix, by agreementWe keep you updated at least every 14 days and agree the publication date with you.
AnonymousReport without telling us who you areNo name, email or IP address. A case key lets you add information later.
RecognitionCredit if you want itBy name or handle in the advisory or release note. We do not pay bounties.
Submit a report.
Test only against your own account and data, ideally with a test key. Do not include full API keys, other people’s personal data, or more proof than you need to show the issue.
How anonymous reporting works.
1You send the report
Without a name or email. We do not attach your IP address or browser details to it.
2You get a case key
Shown once with your reference. Only a fingerprint of the key reaches our inbox, not the key itself.
3You can add information
Send a follow-up with the reference and case key. The fingerprint matches, so we know it is the same reporter.
4We fix and publish
We cannot write to you, so check our changelog and advisories for the fix.
Start free
Trustvice 360
Declare the rules. Have every run checked.
Agents, evidence, governance, commerce and disclosure are all in Trustvice 360. Sign up free and open every suite from one dashboard.
Disclosure