In scope

In-scope assets are all Tryg services, applications, and websites; all non-public Tryg-data incl. personal information, financial information, and proprietary information; or Tryg-data involuntarily publicised anywhere.

In-scope security issues also include:

• Ability to see, modify or hinder availability to above-mentioned Tryg-data.
• Security issues regarding implementation of third-party plugins.
• Security issues in third-party services or -libraries used in any of the in-scope Tryg assets.
• Non-technical issues which can impact Tryg as if it was a technical security issue, e.g. a business process with a specific, vulnerable setup.
• Sites imitating Tryg assets, but not owned by Tryg, e.g. sites aiming to phish Tryg, Tryg customers, or misuse the Tryg brand.

If you're in doubt, you're welcome to ask questions at irt@tryg.com.