The security of our platform and our customers’ data matters to us. If you have found a vulnerability in one of our systems, please let us know so we can fix it as quickly as possible.
How to report
Email security@bluebillywig.com with:
- the system or URL where you found the vulnerability
- a description of the issue and how to reproduce it
- your contact details, so we can follow up
Report the issue as soon as possible after you find it.
What we ask of you
- Don’t share the vulnerability with others until we have fixed it.
- Do only what is needed to show the vulnerability exists. Don’t copy, change or delete data. Where you need data to prove the issue, use as little as possible, and delete it once you have reported.
- Don’t use social engineering, phishing, physical attacks, denial-of-service attacks or automated scans that put a heavy load on our systems.
- Don’t install backdoors or malware, and don’t use the vulnerability to reach other systems.
What we promise
- We confirm receipt of your report within 5 working days.
- We assess your report and keep you informed of our progress.
- We aim to fix confirmed vulnerabilities within 60 days. Together with you, we decide whether and when the issue is made public.
- We handle your report confidentially and don’t share your details without your permission.
- If you follow these rules, we won’t take legal action against you over your report.
We don’t offer financial rewards for reports.