Reporting a Security Issue

If you think you have found a security vulnerability in pro-posal.io, please tell us. Email darren@pro-posal.io with "Security" in the subject, what you found, and how to reproduce it.

What we ask

• Do not access, change or delete anyone else's data. Use your own account or a test account.
• Do not disrupt the service, for example by load testing, spam or automated scanning at volume.
• Give us reasonable time to fix the issue before telling anyone else.

What we do

• We acknowledge reports within 5 working days and keep you updated while we fix it.
• We will not take legal action against anyone who reports an issue in good faith and follows this page.

Rewards and demands

We do not run a paid bug bounty and do not pay for unsolicited reports. We do not respond to demands for payment in return for not publishing an issue, and we may report them.