Security
Vulnerability disclosure
Direct answer: If you find a security issue on trendibizz.com or related Trendi systems we operate, email [email protected]. We prefer coordinated disclosure: tell us first, give us a reasonable window to investigate and fix, then publish if you choose.
How to report
- Email [email protected] with a clear description, affected URL or component, and steps to reproduce where safe.
- Include your preferred contact method if it is not the From address.
- Do not include passwords, personal data of third parties, or exploit chains that would harm customers.
What we ask
- Act in good faith. Do not access data that is not yours, and do not degrade the service.
- Avoid social engineering of staff or customers, physical attacks, and denial-of-service testing unless we agreed that scope in writing first.
- Give us a reasonable time to respond before public disclosure (we aim to acknowledge within a few business days).
What this page is not
- Not a bug bounty with fixed payouts (we may thank researchers; payment is not guaranteed).
- Not permission to test third-party sites, customer sites, or systems you do not own.
- Not the same as our free website security check tool or paid penetration testing service.
Our security.txt
Machine-readable contact details live at /.well-known/security.txt. The Policy field points to this page.