GardenXtra is committed to maintaining the security of our website and protecting our customers’ information. If you believe you have discovered a security vulnerability on GardenXtra.com, please let us know immediately.

We take all legitimate security reports seriously and will investigate verified issues as quickly as possible.

Before submitting a report, please review the following guidelines.

SECTION 1 – CORE PRINCIPLES

GardenXtra will not pursue legal action against security researchers who act responsibly and follow the guidelines below.

We ask that you:

Allow Reasonable Time

Please allow us sufficient time to investigate and resolve the issue before publicly disclosing it.

Respect User Privacy

Do not access, modify, download, or disclose personal information belonging to other users without their explicit permission.

Act in Good Faith

Do not disrupt our services, damage data, interfere with customers, or violate anyone’s privacy while testing.

Do Not Exploit the Vulnerability

Do not use the vulnerability to gain unauthorized access, retrieve sensitive information, or increase security risks.

Follow Applicable Laws

All testing must comply with applicable local, state, federal, and international laws.

SECTION 2 – VULNERABILITY REPORTS

GardenXtra appreciates responsible security disclosures from researchers and customers.

To submit a valid report, please:

Follow the Core Principles listed above.
Report genuine security vulnerabilities that could impact our systems or customer data.
Provide enough information for our team to reproduce and verify the issue.
Report the issue responsibly without attempting to exploit it further.

SECTION 3 – NON-ELIGIBLE REPORTS

The following types of reports generally do not qualify as security vulnerabilities:

Spam, phishing, or social engineering reports unrelated to our infrastructure.
Missing SPF, DKIM, or DMARC records.
Clickjacking on non-sensitive pages.
Rate-limiting or brute-force concerns without a demonstrated security impact.
Denial-of-Service (DoS) attacks or stress testing.
Vulnerabilities requiring rooted or jailbroken devices.
Issues affecting outdated browsers, unsupported software, or browser extensions.