Security

Report A Security Problem

If you found a security problem in a Fireball app or website, tell us here. Reports go privately to the person who handles security and are never posted publicly.

  • Say what you found, where, and the steps to see it.
  • Only test against your own account and data. Don't access, change or delete anyone else's.
  • Don't run denial-of-service, spam or social-engineering tests.
  • Give us a reasonable time to fix it before you tell anyone else.
  • We don't run a paid bug bounty. Reports that ask for payment before sharing details aren't answered.