Report a vulnerability
Found a weak spot in the security of www.bloomup.org or app.bloomup.org? Let us know, so we can fix it before anyone misuses it.
How to report it
Email your report to hello@bloomup.org with "Security" in the subject line.
What helps us
- What you found, and where: the URL or the part of the product.
- The steps to reproduce it.
- What you think someone could do with it.
- How we can reach you.
What we ask of you
- Go no further than you need to show the vulnerability.
- Do not view, change or delete other people's data. If you do come across personal data, stop straight away and tell us.
- Do not tell anyone else about the vulnerability until we have fixed it.
- Do not take the website or the app down, and do not try to trick people into giving you access.
What you can expect from us
- We respond to your report as soon as we can.
- We keep you updated until the problem is fixed.
- We treat your details confidentially.