SECURITY
Help me keep Devso Software projects secure
Good-faith security research is welcome. Every credible report will be reviewed and handled carefully
Report Vulnerability
Private reports help me triage and fix issues responsibility.
1.
Share the details
Send a clear report with what happened, how to reproduce it and the impact
2.
I'll investigate
I'll review, reproduce and prioritise the issue.
I may reach out for more information.
3.
We'll coordinate disclosure
We'll agree on a timeline and credit. I'll publish a fix and acknowledge your report.
What to Include
The more detail you can provide, the easier it is to validate and fix
Affected product and version (where applicable)
Steps to reproduce
Impact (what could happen)
Support evidence (screenshots, logs, proof of concept, etc.)
A note on rewards
Devso Software is self funded, so no monetary bounties aren't available at this time
Where applicable, I'll offer an 80% lifetime discount on the affected product or related product where applicable as a thank you for your help.
Safe Harbour
Good faith researchers are welcome here. If you follow these guidelines you're in safe harbour.
Don't access data that isn't yours
Don't impact availability or integrity
Don't share the issue publicly until we coordinate
Keep the report confidential