Report a Vulnerability
Found a weak spot in the security of www.bloomup.org or app.bloomup.org? Let us know, so we can fix it before anyone misuses it.
How to Report It
Email your report to hello@bloomup.org with "Security" in the subject line.
What Helps Us
- What you found, and where: the URL or the part of the product.
- The steps to reproduce it.
- What you think someone could do with it.
- How we can reach you.
What We Ask of You
- Go no further than you need to show the vulnerability.
- Do not view, change or delete other people's data. If you do come across personal data, stop straight away and tell us.
- Do not tell anyone else about the vulnerability until we have fixed it.
- Do not take the website or the app down, and do not try to trick people into giving you access.
What You Can Expect from Us
- We respond to your report as soon as we can.
- We keep you updated until the problem is fixed.
- We treat your details confidentially.