Security contact

A clear route
for security reports.

If you believe you have found a vulnerability affecting a TrustCore-owned public service or artifact, contact us with enough detail to assess it.

Report an issue

security@trustcore.fi

If this address bounces or you cannot reach it, use kari.hyotyla@trustcore.fi.

Include

  • The affected URL, component or artifact.
  • A concise description and reproduction steps.
  • The observed impact and when it occurred.
  • A contact method for follow-up.

Keep the report bounded.

Do not include passwords, access tokens or unnecessary personal data in email. For sensitive details, ask to agree an appropriate transfer method first.

A report is not authorization to access or alter third-party systems, test beyond your permission or disclose other people’s data. This page does not establish a bug bounty, response-time commitment or legal safe harbor.

For pilot and business enquiries, use the business contact page.