Security & Responsible Disclosure Policy

Effective date: 2026-09-05   Version: 1.0.0

This document forms part of the Astalias global legal framework. Astalias is an international software and digital services platform and is not presented as being directed exclusively to any single country. Mandatory rights and obligations that cannot lawfully be excluded remain unaffected.

1. Reporting

Security vulnerabilities affecting Astalias-operated services may be reported to trend@barooc.com with enough detail to reproduce and assess the issue.

2. Good-faith research

We welcome good-faith reports that avoid privacy violations, data destruction, social engineering, physical attacks, denial of service, excessive automated traffic and access beyond what is necessary to demonstrate a vulnerability.

3. Confidentiality

Please give us a reasonable opportunity to investigate and remediate before public disclosure. We will make reasonable efforts to acknowledge valid reports and coordinate disclosure.

4. No bounty promise

This Policy does not create a contractual obligation to pay a bounty unless a separate written bounty programme expressly applies.