Reporting a security issue

If you have found a vulnerability in this site or any WOPR Systems service, please report it. You do not need permission to tell us about a real problem you have found in good faith.

How to report

Email [email protected] (or [email protected]). Include what you found, how to reproduce it, and the impact you think it has. A proof of concept helps.

What to expect

• An acknowledgement that the report arrived.
• A good-faith effort to confirm and fix genuine issues.
• No legal action against research done in good faith that avoids privacy violations, data destruction, and service disruption.

Out of scope

Denial of service, social engineering, physical attacks, and automated scanner output without a demonstrated impact are out of scope.

Machine-readable policy: /.well-known/security.txt