TopOut Group welcomes reports from security researchers to help keep our systems secure. If you believe you’ve found a security vulnerability in a TopOut Group product or infrastructure, please let us know.
How to Report Please email [email protected]. If possible, encrypt your message using our PGP key found at topoutgrp.com/pgp-key.txt.
Our Guidelines To encourage responsible disclosure, we ask that you:
- Provide a detailed description of the vulnerability and steps to reproduce it.
- Give us a reasonable timeframe to remediate the issue before making any information public.
- Avoid privacy violations, destruction of data, or interruption of our services.
What We Promise
- We will acknowledge receipt of your report within 10 business days.
- We will not take legal action against researchers who act in good faith and follow these guidelines.
- We will keep you updated as we work to resolve the issue.
Note: TopOut Group does not currently offer a paid bug bounty program, but we are happy to provide a letter of appreciation or public acknowledgement for valid, high-impact findings.