Reporting a security issue

If you believe you've found a vulnerability in YourBio, please tell us privately so we can fix it before it is exploited.

How to report

Email the address in our security.txt with steps to reproduce, the affected URL or feature, and what an attacker could do. Please don't include real customers' personal data.

What we ask

• Test only against your own account and store.
• Don't access, change or delete other people's data, and stop as soon as you can show the issue.
• No denial-of-service, spam, social engineering or physical attacks.
• Give us reasonable time to fix the issue before telling anyone else.

What we commit to

• Acknowledge your report within 3 business days and keep you updated.
• Not pursue legal action for good-faith research that follows these rules.
• Credit you when the fix ships, if you'd like.