Report a vulnerability#
If you think you have found a security problem in Finsplore, please tell us. Email hello@finsplore.io with what you found, how to reproduce it, and how we can contact you.
What we ask
- Give us reasonable time to fix the issue before you share it publicly. We aim to confirm receipt and to keep you updated until it is fixed.
- Only use accounts you own or test accounts we give you. Do not access, change, download or keep other people's data. If you come across someone else's data by accident, stop, and tell us.
- Do not run denial-of-service tests, spam, social engineering or physical attacks, and do not use automated scanners that put heavy load on our systems.
What we commit to
- If you act in good faith and follow these guidelines, we will not take legal action against you for your research, and we will work with you to understand and fix the issue.
- With your permission, we will thank you publicly once the issue is fixed.
- We do not currently run a paid bug bounty.
Out of scope: reports about missing security headers with no demonstrated impact, self-XSS, clickjacking on pages without sensitive actions, and issues in third-party services we do not control (report those to the provider).
Questions about this page? Email hello@finsplore.io.