Security & vulnerability reports

We take the safety of your data seriously. If you think you found a security problem in Throttlebook, please tell us privately so we can fix it before anyone gets hurt.

How to report

Use the Feedback button on any page, choose Bug, and start your message with SECURITY. Include the page or endpoint, steps to reproduce, and what you expected. Leave an email if you want a reply. Please don't include other people's personal data.

What we ask

• Give us a reasonable time to fix the issue before you share it publicly.
• Don't access, change or delete data that isn't yours, and stop once you've shown the problem.
• No denial-of-service, spam, social engineering or physical attacks, and don't run automated scanners against our rate-limited endpoints.

What we promise

We'll confirm we got your report, keep you updated, and credit you when it's fixed if you'd like.

Machine-readable contact: /.well-known/security.txt.