Trust & Security Center

Vulnerability disclosure policy, PGP encryption key, security research acknowledgements, and hiring guidelines.

Vulnerability Disclosure Policy

Report a vulnerability in trend-trader.store to [email protected]. Give a written description, the address you tested, and the steps to reproduce it.

In scope

• The store website, sign-in, cart, checkout, and account pages.
• Script delivery after a payment that has cleared.
• The practice lab. Balance stays 0, and it does not send live broker orders.

Out of scope

• PayPal, banks, brokers, and trading platforms this store does not operate.
• Denial of service (DoS), spam, and social engineering.
• Findings requiring physical access or compromised client devices.

Responsible research rules

• Do not read, modify, or delete another person’s account or order.
• Do not place a trade, move money, or misuse administrative connections.
• Stop once you can demonstrate the issue. Provide reasonable time for remediation prior to public disclosure.

There is no public monetary bounty. Copyright © Trend Trader Enterprises. All rights reserved.

Mgmt Wishes Our Script Users Best of Luck, T.T.