Report a vulnerability

Found a vulnerability?

Thank you for reporting it. This is how to do it, and this is our promise to you.

Our promise

Report in good faith and we will not take legal action. Good faith means: you test only to demonstrate the problem, you do not look at other people's data, you do not take the service down, and you give us time to fix it before you make it public.

What counts

Sites and webshops that run on StoreBOS, including those of our customers.
Anything those sites use to fetch or send data.

What does not count

Phishing, social engineering or physical access.
Attacks that take the service down or put heavy load on it.

Reward

We are a free beta and have no bug bounty. You do get our sincere thanks, and a reply when one is needed.

Report it here