We believe responsible security research makes everyone safer. If you've found a vulnerability in our systems, we want to hear from you — anonymously if you prefer.
Good-faith security research is protected. We will not pursue legal action against researchers acting within this policy.
You may submit reports without providing any personal information. Anonymity is fully supported.
We acknowledge all reports within 5 business days and provide status updates throughout remediation.
Researchers who submit valid findings may be acknowledged in our Security Hall of Fame upon request.
The following assets are in scope for security testing.
| Asset | Type | Status |
|---|---|---|
transplat.eu |
Web Application | In Scope |
api.transplat.eu |
API | In Scope |
| Mobile App (iOS / Android) | Mobile Application | In Scope |
| Third-party services & integrations | External | Out of Scope |
| Social engineering / phishing | Attack Type | Out of Scope |
| Denial of Service (DoS/DDoS) | Attack Type | Out of Scope |
Our process from submission to resolution.
We acknowledge your submission within 5 business days.
Our security team evaluates severity using CVSS scoring and validates the finding.
The vulnerability is assigned to the responsible team and patched according to SLA: Critical ≤7 days, High ≤30 days, Medium ≤90 days.
If you provided contact details, we notify you when the issue is resolved.
All fields except Severity and Description are optional.
Your submission has been received. If you provided contact details, our security team will follow up within 5 business days.
For encrypted or sensitive communications, you can reach us directly.
security@transplat.eu