TranceAddict.com Security Policy
Purpose
This Security Policy describes how individuals can responsibly report potential security issues related to TranceAddict.com. It ensures that we can address vulnerabilities quickly while providing clear expectations for both reporters and our team.
Scope
This policy applies to all services and content hosted on TranceAddict.com, including web pages, user accounts, and community forums.
How to Report a Vulnerability
If you believe you have found a security vulnerability on TranceAddict.com, please follow these steps:
- Send a detailed email to:
[email protected]
- Include the following information:
- A clear description of the issue.
- The exact steps to reproduce it, including URLs and screenshots if available.
- Any proof-of-concept code or scripts that demonstrate the issue.
- Your preferred contact method for follow-up questions.
The more detailed your report, the faster we can verify and fix the issue.
Acknowledgment and Response
- We aim to acknowledge receipt of your report within 5 business days.
- Once acknowledged, we will evaluate the issue and, where appropriate, provide periodic updates on remediation progress.
- Critical issues may receive expedited handling.
Responsible Disclosure
By submitting a report under this policy, you agree to:
- Refrain from publicly disclosing vulnerabilities before we have had an opportunity to address them.
- Not leverage the vulnerability to access, modify, or destroy data.
- Avoid testing beyond what is necessary to demonstrate the potential issue.
Legal Safe Harbor
TranceAddict.com encourages responsible security research in good faith. Provided you comply with this policy and applicable law, TranceAddict.com will not pursue legal action against researchers who report issues according to these guidelines.
Additional Notes
- This policy does not cover abuse reports unrelated to security vulnerabilities (e.g., general forum moderation).
- Reports that violate this policy or applicable law may not receive a response.