Report an issue
Email hello@trespasssec.com with the subject “Responsible disclosure” and a concise, non-sensitive description. If more detail is useful, we will arrange a secure channel.
Responsible disclosure
Help us protect this site—carefully and in good faith.
If you believe this website has a security issue, send a concise report and give us room to investigate it safely.
Keep it safe
Do not send passwords, access tokens, or exploit details by email. Do not access, alter, download, retain, or disclose data that is not yours. Stop testing if you encounter personal data, customer data, or any effect on availability.
Testing boundaries
Do not use denial-of-service techniques, social engineering, phishing, physical access attempts, spam, automated high-volume scanning, or testing against systems other than the public website at trespasssec.com and its public redirect hosts at trespasssecurity.io. Do not attempt privilege escalation, lateral movement, persistence, or access to third-party services.
Good-faith reports
We welcome reports that follow these boundaries. We will investigate, may ask follow-up questions through a secure channel, and will address confirmed issues as appropriate. We do not offer a bug-bounty program.