Security

To report a security vulnerability in TripFabric, email security@tripfabric.eu.

Security lead: Juan Ignacio Fernandez Olavarrieta, Director of Trip Fabric Technologies Limited.

What to include

The address of the affected page, the steps to reproduce the issue, and what someone could do with it. You can write in English or Spanish.

What happens next

We confirm that we received your report within 7 days, and we tell you when the issue is fixed.

Scope

In scope: tripfabric.eu and triphere.eu, with their subdomains, such as the partners’ storefronts.

Out of scope: denial of service, spam, social engineering, physical attacks, and the services of the providers we use, such as Stripe. Report those to the provider.

Rules for testing

• Test only with accounts and data that are your own.
• Do not access, change or delete anyone else’s data. If you reach any, stop and report it.
• Give us reasonable time to fix the issue before you make it public.

Rewards

We do not run a paid bug bounty.