Found a vulnerability? Tell us
If you find a weakness in our sites, our platform or an app we maintain, report it to us. We answer within 2 working days and fix it with you.
How to report it
- Mail security@appin7days.com.
- Describe what you found, how you found it and how we can reproduce it.
- Send no personal data you don't need to show the problem.
What you can expect from us
- A first answer within 2 working days, with our assessment and when we expect to fix it.
- We keep you informed until it is fixed.
- If you keep to the rules below, we take no legal action against you for your report.
- If you want, we name you when we publish the fix.
- We pay no reward. There is no bug bounty.
What we ask of you
- Do no more than you need to show the problem.
- Do not copy, change or delete anyone else's data, and delete what you obtained once you have reported it.
- Do not install malware, and do not attack our services with load or flooding.
- Do not use social engineering, phishing or physical access.
- Do not share the problem with others until it is fixed.
What this covers
Our sites, our platform and the apps we build and maintain for our clients.
Your app and its data, your customers' too, stay in the EU. So do the backups and the logs.