Report privately
Email security@tanxor.com with reproduction steps, affected URLs, and impact.
Security and responsible disclosure
We welcome good-faith reports that help protect Tanxor tenants and their data. Please report suspected vulnerabilities privately so our security team can investigate and coordinate a fix.
Safe testing
Use accounts and data you own. Stop if testing may affect another tenant or service availability.
Coordinated response
We acknowledge reports, investigate severity, remediate, and coordinate disclosure with the reporter.
Rules of engagement
- Do not access, modify, retain, or disclose another person's data.
- Do not perform denial-of-service, social-engineering, spam, destructive, or physical-security testing.
- Do not use automated scanners at a volume that degrades the service.
- Give us reasonable time to investigate and remediate before public disclosure.
A public acknowledgments list will be maintained for eligible reporters who request recognition. This policy does not currently promise a monetary bounty.