Responsible Disclosure

We welcome reports of security vulnerabilities in this website or our systems.

If you believe you've found a vulnerability, please email hello@pinnashield.com with enough detail to reproduce the issue. Please do not access, modify, or delete data that isn't yours, and do not run disruptive or automated testing against production systems.

We will acknowledge reports promptly, keep you informed as we investigate, and will not pursue action against good-faith research conducted within these guidelines.

[TODO before launch: publish /.well-known/security.txt referencing this page, add a PGP key if desired, and have this policy reviewed by counsel.]