Vulnerability Disclosure
Turvix takes security seriously. If you find a potential vulnerability in the Turvix service, please report it to us responsibly.
How to Report
Email a description of the finding to security@turvix.fi.
Where possible, include:
- a short description of the issue and its impact
- steps to reproduce
- the relevant URL, account, or feature (do not include passwords or other people's data)
- your contact details for follow-up
What We Ask
- Do not exploit the finding, and do not share details with others until we have had a chance to fix it.
- Do not use denial-of-service attacks, social engineering, or physical intrusion.
- Do not run automated tools in a way that disrupts the service or other users.
- Do not attempt to access other users' or organizations' data. If you encounter such data by accident, stop immediately and tell us in your report.
What We Promise
- We review reports sent to this address.
- We will not take legal action against good-faith research that follows this policy.
- We may credit you in acknowledgements if both sides agree. We do not currently offer a bug bounty.
Scope
This policy covers the Turvix web service and related systems we operate. Third-party services (for example hosting, authentication, or email) follow those providers' own processes.
Contact
General support: support@turvix.fi
Turvix Oy
Last updated: 6 September 2026