Security and vulnerability disclosure

The security contact could not be loaded right now. Please try again in a few minutes.

A good report says:

• what you found and where (the page or API path);
• the steps to reproduce it, with any proof of concept;
• what an attacker could do with it;
• how we can reach you, if you want to hear back.

Please do not include other people's personal data in a report.

We read every report and will tell you when it is fixed. Our response times will be published here.

In scope: the SocialPulse web app and its API, operated by the operator of SocialPulse.

Out of scope: the social platforms you connect (Meta, LinkedIn, X and others: report to them), denial of service, spam, social engineering, physical attacks, and automated scanning that degrades the service for others.

Safe harbour (draft): if you act in good faith, stay within this scope, avoid privacy violations, data destruction and service disruption, use only test accounts or your own data, and give us reasonable time to fix the issue before telling anyone else, we will not pursue or support legal action against you for your research, and we will treat it as authorised.

See our trust page for who processes data for us and where, and the Privacy Policy.