Report Security Issues

Tomcom, Last Updated: August 2026

At Tomcom, security is something we take seriously. We protect our customers' data, payments, and accounts with industry-standard tools, but no system is bulletproof. If you've spotted a vulnerability, suspicious activity, or anything that looks like a security risk on tomcom.us, we want to hear about it.

What to report

• Website vulnerabilities
• Suspicious logins or unauthorized account access
• Payment fraud or suspicious billing activity
• Phishing attempts pretending to be Tomcom
• Data exposure (leaked customer info, passwords, private data)
• Malware, scams, or fraudulent ads claiming to be from us
• Anyone impersonating Tomcom staff or customers

If you're not sure whether something counts, report it anyway.

How to report

Email us directly at contact@tomcom.us with subject line "SECURITY REPORT". Please include a clear description, where you found it, steps to reproduce it, screenshots if available, when you found it, and your contact info.

What not to do

• Don't publicly disclose the issue before we've had a chance to fix it
• Don't share the vulnerability with third parties
• Don't attempt to exploit the issue beyond what's needed to confirm it
• Don't access, modify, or download other users' data
• Don't run automated scans, brute-force attacks, or denial-of-service tests on our site

What happens after you report

We'll acknowledge your report within 2 business days, investigate (usually 3-7 business days), work to resolve confirmed issues, and follow up with you.

If your account has been compromised

Change your password immediately, email us at contact@tomcom.us with subject "ACCOUNT COMPROMISED", include your order history so we can verify your identity, and check your bank statements for unauthorized charges.

Phishing and fake Tomcom communications

Tomcom will NEVER ask for your password by email/phone/text, request your full card number outside our secure checkout, send links asking you to "verify" your account on a third-party site, demand payment in gift cards or cryptocurrency, or threaten to close your account unless you act immediately. Forward suspicious messages to contact@tomcom.us and don't click any links inside.

Our commitment to security

• SSL encryption across the site
• PCI-compliant payment processing through trusted providers
• Encrypted password storage
• Restricted internal access to customer data on a need-to-know basis

Legal safe harbor

If you report a security issue in good faith, follow this policy, and don't damage our systems or customers' data, we won't pursue legal action against you, unless you violate the rules above or break applicable laws while researching the issue.

Contact us

Tomcom
3125 Karen Pl
Colorado Springs, CO 80907
United States
Phone: +1 (719) 512-2797
Email: contact@tomcom.us
Website: tomcom.us

Hours:

• Monday - Friday: 9:00 AM - 9:00 PM
• Saturday: 10:00 AM - 10:00 PM
• Sunday: Closed