Responsible Disclosure Policy

Reporting a Vulnerability

If you believe you have identified a security vulnerability in a Trustoryx system, please report it to nikhil@trustoryx.digital.

What to Include

• A description of the vulnerability and its potential impact
• Steps to reproduce the issue
• Any relevant screenshots or proof of concept
• Your contact information for follow-up

What Not to Do

• Do not publicly disclose the vulnerability before we have remediated it
• Do not attempt to access data that does not belong to you
• Do not degrade or disrupt services

Our Commitment

We will acknowledge receipt of your report within 48 hours, investigate the issue, and coordinate remediation. We will keep you informed throughout the process.