Tsenta Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: true
policy: [https://tsenta.com/bug-bounty]
contact: [mailto:founders@tsenta.com]
security_txt: https://tsenta.com/.well-known/security.txt
security_txt_expires: '2027-02-12T00:00:00.000Z'
coordinated_disclosure: true
bug_bounty: false          # a vulnerability disclosure program; no monetary bounty advertised
scope:
  in_scope:
    - Tsenta browser extension
    - tsenta.com and web services operated by Tsenta
    - Tsenta-owned API endpoints
    - authentication and authorisation controls
    - access-control vulnerabilities
    - unintended exposure of sensitive information
  note: >-
    Only systems and services owned or operated by Tsenta are covered. Reports
    generated solely by automated tools without demonstrated impact or manual
    verification may not be accepted.
evidence:
  - {source: well-known/tsenta-security.txt, kind: security.txt}
  - {source: https://tsenta.com/bug-bounty, kind: disclosure-policy-page}