We'd rather you find the issues before someone else does. Here's our policy, channels, and commitment.
Send a detailed description, reproduction steps, and screenshots if relevant. Your message is encrypted.
✅ Safe Harbor: We will not take legal action against security researchers acting in good faith and in accordance with this policy.
✅ No Retaliation: We will never block or penalize a researcher who reports responsibly.
✅ Coordination: We request 90 days for remediation before public disclosure.
❌ Don't: Don't access other users' data. Don't disrupt services. Don't run automated scans without coordination.
We're an early-stage startup - no monetary rewards yet. But we commit to:
Still empty - be the first. Report responsibly and earn your place here.