At Truv, we take the security of our systems and data very seriously. We are committed to ensuring the safety and privacy of our customers, and we value the contribution of security researchers and the broader community in helping us maintain the highest security standards.
This Responsible Disclosure Policy applies to any vulnerabilities or security issues identified in our products, services, and websites. We encourage responsible disclosure of any potential security vulnerabilities to help us address them promptly.
To ensure that vulnerability reports are handled responsibly and effectively, we ask that you:
If you have identified a potential security vulnerability, please report it to us by emailing our security team at security@truv.com. Your report should include:
We greatly appreciate the efforts of the security community in helping us improve our security posture. Truv's responsible disclosure program is strictly non-paid. We do not offer monetary rewards or compensation for vulnerability reports. Participation in this program is voluntary, and any reports submitted are considered contributions to the security of our systems and services.
By submitting a report, you agree to comply with this Responsible Disclosure Policy and applicable laws. You also acknowledge that Truv does not authorize or permit any activities that would violate applicable laws or disrupt our services.
If you have any questions about this policy or wish to report a vulnerability, please contact our security team at security@truv.com.