Report a vulnerability

Found a security problem in VibeShields?

Please email security@vibeshields.com with the steps to reproduce. Masked values are enough; please don't send real secrets or other people's data. We reply within three business days and keep you updated until it is fixed.

In scope

• vibeshields.com, app.vibeshields.com and api.vibeshields.com
• The VibeShields scanner's behaviour

Please don't

• run denial-of-service or load tests;
• use social engineering or phishing against us or our users;
• access, change or keep other customers' data. Use test accounts you own;
• test apps you don't own through VibeShields.

Our promise

If you act in good faith and follow these rules, we will not take legal action against you, and we will thank you publicly if you want us to. We don't run a paid bug bounty yet.