Log in
Home

Report a Security Issue

Responsible disclosure — help us keep BoredMondays safe.

If you've found a security vulnerability, email security@boredmondays.com with details.

Please do not test in ways that could harm users or access other people's private data. Don't access data that isn't yours.

In scope

  • Authentication or authorization bypass
  • Access to other users' private Picks or data
  • Injection, XSS, or privilege escalation
  • Exposed secrets or credentials

For account or content issues, use in-app reporting instead. This page is only for security vulnerabilities.