Security Policy

Reporting a vulnerability

• Email contact@asquaresolution.com with subject "SECURITY — TrustSeal".
• Include a description, reproduction steps, affected URL/endpoint, and impact.
• Allow a reasonable remediation window before public disclosure.

Scope

In scope: trustseal.asquaresolution.com, the TrustSeal APIs, the badge loader, public seal pages, and the DNS TXT verification flow. Out of scope: volumetric DoS, social engineering, and physical attacks.

Our commitments

• Acknowledge reports promptly and share remediation progress.
• No legal action for good-faith research within this policy.
• Credit reporters who wish to be acknowledged after a fix ships.