Responsible disclosure

Security matters to us. If you've found a vulnerability in Tourspider, we'd like to hear about it so we can fix it.

Our promise

If you report a vulnerability in good faith, we won't take legal action against you, and we'll work with you to understand and resolve the issue quickly.

How to report

Email us with a clear description of the issue, the steps to reproduce it, and any proof-of-concept. The more detail, the faster we can act.

Report a vulnerability

Please do

  • Give us a reasonable time to fix the issue before disclosing it publicly
  • Provide enough information to reproduce the problem
  • Act in good faith and avoid privacy violations or service disruption

Please don't

  • Access, modify or delete data that isn't yours
  • Run automated scanning that degrades the service
  • Use social engineering, phishing or physical attacks
  • Publicly disclose the issue before we've resolved it

What to expect

We'll acknowledge your report, keep you updated on our progress, and credit you once the issue is resolved — if you'd like the recognition.